A AegiFlow
LOWCVSS 1.2

CVE-2007-3108

CVE-2007-3108 updated by NVD

Modified
2026-09-20
Sources
nvd

Summary

The BN_from_montgomery function in crypto/bn/bn_mont.c in OpenSSL 0.9.8e and earlier does not properly perform Montgomery multiplication, which might allow local users to conduct a side-channel attack and retrieve RSA private keys.

Affected packages

EcosystemPackageAffected versionsFixed versions
OpenSSLopenssl[object Object]

References

Includes data from the National Vulnerability Database (NIST). NVD data is in the public domain; this page is not endorsed by NIST.

CVE® is a registered trademark of The MITRE Corporation. CVE content reproduced under the CVE Terms of Use; copyright designation © MITRE.