Unrated severityNVD Advisory· Published Oct 4, 2013· Updated Jun 16, 2026
CVE-2013-5915
CVE-2013-5915
Description
The RSA-CRT implementation in PolarSSL before 1.2.9 does not properly perform Montgomery multiplication, which might allow remote attackers to conduct a timing side-channel attack and retrieve RSA private keys.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
35cpe:2.3:a:polarssl:polarssl:*:*:*:*:*:*:*:*+ 34 more
- cpe:2.3:a:polarssl:polarssl:*:*:*:*:*:*:*:*range: <=1.2.8
- cpe:2.3:a:polarssl:polarssl:0.10.0:*:*:*:*:*:*:*
- cpe:2.3:a:polarssl:polarssl:0.10.1:*:*:*:*:*:*:*
- cpe:2.3:a:polarssl:polarssl:0.11.0:*:*:*:*:*:*:*
- cpe:2.3:a:polarssl:polarssl:0.11.1:*:*:*:*:*:*:*
- cpe:2.3:a:polarssl:polarssl:0.12.0:*:*:*:*:*:*:*
- cpe:2.3:a:polarssl:polarssl:0.12.1:*:*:*:*:*:*:*
- cpe:2.3:a:polarssl:polarssl:0.13.1:*:*:*:*:*:*:*
- cpe:2.3:a:polarssl:polarssl:0.14.0:*:*:*:*:*:*:*
- cpe:2.3:a:polarssl:polarssl:0.14.2:*:*:*:*:*:*:*
- cpe:2.3:a:polarssl:polarssl:0.14.3:*:*:*:*:*:*:*
- cpe:2.3:a:polarssl:polarssl:0.99:pre1:*:*:*:*:*:*
- cpe:2.3:a:polarssl:polarssl:0.99:pre3:*:*:*:*:*:*
- cpe:2.3:a:polarssl:polarssl:0.99:pre4:*:*:*:*:*:*
- cpe:2.3:a:polarssl:polarssl:0.99:pre5:*:*:*:*:*:*
- cpe:2.3:a:polarssl:polarssl:1.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:polarssl:polarssl:1.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:polarssl:polarssl:1.1.0:rc0:*:*:*:*:*:*
- cpe:2.3:a:polarssl:polarssl:1.1.0:rc1:*:*:*:*:*:*
- cpe:2.3:a:polarssl:polarssl:1.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:polarssl:polarssl:1.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:polarssl:polarssl:1.1.3:*:*:*:*:*:*:*
- cpe:2.3:a:polarssl:polarssl:1.1.4:*:*:*:*:*:*:*
- cpe:2.3:a:polarssl:polarssl:1.1.5:*:*:*:*:*:*:*
- cpe:2.3:a:polarssl:polarssl:1.1.6:*:*:*:*:*:*:*
- cpe:2.3:a:polarssl:polarssl:1.1.8:*:*:*:*:*:*:*
- cpe:2.3:a:polarssl:polarssl:1.2.0:*:*:*:*:*:*:*
- cpe:2.3:a:polarssl:polarssl:1.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:polarssl:polarssl:1.2.2:*:*:*:*:*:*:*
- cpe:2.3:a:polarssl:polarssl:1.2.3:*:*:*:*:*:*:*
- cpe:2.3:a:polarssl:polarssl:1.2.4:*:*:*:*:*:*:*
- cpe:2.3:a:polarssl:polarssl:1.2.5:*:*:*:*:*:*:*
- cpe:2.3:a:polarssl:polarssl:1.2.6:*:*:*:*:*:*:*
- cpe:2.3:a:polarssl:polarssl:1.2.7:*:*:*:*:*:*:*
- (no CPE)range: <1.2.9
Patches
Vulnerability mechanics
References
8- secunia.com/advisories/55084nvdVendor Advisory
- polarssl.org/tech-updates/security-advisories/polarssl-security-advisory-2013-05nvdVendor Advisory
- lists.fedoraproject.org/pipermail/package-announce/2013-October/118758.htmlnvd
- lists.fedoraproject.org/pipermail/package-announce/2013-October/119014.htmlnvd
- lists.fedoraproject.org/pipermail/package-announce/2013-October/119018.htmlnvd
- osvdb.org/98049nvd
- www.debian.org/security/2013/dsa-2782nvd
- www.securityfocus.com/bid/62771nvd
News mentions
0No linked articles in our index yet.