|Description||wolfSSL (formerly CyaSSL) before 3.6.8 does not properly handle faults associated with the Chinese Remainder Theorem (CRT) process when allowing ephemeral key exchange without low memory optimizations on a server, which makes it easier for remote attackers to obtain private RSA keys by capturing TLS handshakes, aka a Lenstra attack.|
|Source||CVE (at NVD; CERT, LWN, oss-sec, fulldisc, bugtraq, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, Mageia, GitHub code/issues, web search, more)|
Vulnerable and fixed packages
The table below lists information on source packages.
|mariadb-10.0 (PTS)||jessie, jessie (lts)||10.0.38-0+deb8u1||fixed|
|mysql-5.5 (PTS)||jessie, jessie (lts)||5.5.62-0+deb8u1||fixed|
The information below is based on the following data on fixed versions.