CVE-2015-2141

Publication date 1 July 2015

Last updated 24 July 2024

Ubuntu priority

Description

The InvertibleRWFunction::CalculateInverse function in rw.cpp in libcrypt++ 5.6.2 does not properly blind private key operations for the Rabin-Williams digital signature algorithm, which allows remote attackers to obtain private keys via a timing attack.

Status

Show unmaintained releases

Package	Ubuntu Release	Status
libcrypto++	17.04 zesty	Not affected
	16.10 yakkety	Not affected
	16.04 LTS xenial	Not affected
	15.10 wily	Not affected
	15.04 vivid	Fixed 5.6.1-6+deb8u1build0.15.04.1
	14.10 utopic	Fixed 5.6.1-6+deb8u1build0.14.10.1
	14.04 LTS trusty	Fixed 5.6.1-6+deb8u1build0.14.04.1
	12.04 LTS precise	Ignored end of life

How can I get the fixes?
What do statuses mean?
Patch details

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package	Patch details
libcrypto++	Upstream: 9425e16

References

MITRE
NVD
Launchpad
Debian

Other references

https://github.com/weidai11/cryptopp/commit/9425e16437439e68c7d96abef922167d68fafaff
https://eprint.iacr.org/2015/368
https://www.cve.org/CVERecord?id=CVE-2015-2141