{"id":"CVE-2013-5915","aliases":["DSA-2782-1","EUVD-2013-5749","GHSA-ff9h-pchm-fq33","MGASA-2013-0353","UBUNTU-CVE-2013-5915"],"status":"published","title":"The RSA-CRT implementation in PolarSSL before 1.2.9 does not properly perform Montgomery...","description":"The RSA-CRT implementation in PolarSSL before 1.2.9 does not properly perform Montgomery multiplication, which might allow remote attackers to conduct a timing side-channel attack and retrieve RSA private keys.","severity":{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.02143,"percentile":0.82178,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-310"],"published":"2013-10-04T17:00:00Z","modified":"2026-06-16T23:59:44Z","fixes":[{"ecosystem":"Mageia:3","package":"polarssl","fixed_in":["1.3.1-1.mga3"],"sources":["osv"]},{"ecosystem":"Mageia:3","package":"pdns","fixed_in":["3.3.1-1.mga3"],"sources":["osv"]},{"ecosystem":"Mageia:3","package":"ragel","fixed_in":["6.8-1.mga3"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:6.0","package":"polarssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.9-1~deb6u1"}]}],"versions":["0.12.1-1","0.12.1-1squeeze1","0.14.3-1","1.0.0-1","1.0.0-2","1.0.0-2+s390x","1.0.0-3","1.1.0-1","1.1.1-1","1.1.2-1","1.1.3-1","1.1.4-1","1.1.4-2","1.2.0-1","1.2.2-1","1.2.3-1","1.2.4-1","1.2.5-1","1.2.6-1","1.2.7-1","1.2.8-1","1.2.8-2"],"bundled":3},{"source":"osv","ecosystem":"Debian:7","package":"polarssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.9-1~deb7u1"}]}],"versions":["1.1.4-2","1.2.0-1","1.2.2-1","1.2.3-1","1.2.4-1","1.2.5-1","1.2.6-1","1.2.7-1","1.2.8-1","1.2.8-2","1.2.9-1~deb6u1","1.2.9-1~deb6u2","1.2.9-1~deb6u3","1.2.9-1~deb6u4","1.2.9-1~deb6u5"],"bundled":3},{"source":"osv","ecosystem":"Mageia:3","package":"polarssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.1-1.mga3"}]}]},{"source":"osv","ecosystem":"Mageia:3","package":"pdns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.1-1.mga3"}]}]},{"source":"osv","ecosystem":"Mageia:3","package":"ragel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8-1.mga3"}]}]}],"products":[{"vendor":"polarssl","product":"polarssl"}],"references":[{"url":"http://secunia.com/advisories/55084","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","report"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2013-October/119014.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"]},{"url":"http://www.securityfocus.com/bid/62771","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://osvdb.org/98049","tags":["vdb-entry","x_refsource_OSVDB","x_transferred","report"]},{"url":"http://www.debian.org/security/2013/dsa-2782","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2013-October/119018.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2013-October/118758.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"]},{"url":"https://polarssl.org/tech-updates/security-advisories/polarssl-security-advisory-2013-05","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-5915"},{"url":"https://github.com/advisories/GHSA-ff9h-pchm-fq33"},{"url":"https://advisories.mageia.org/MGASA-2013-0353.html","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/pipermail/package-announce/2013-October/119014.html","tags":["web"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=11459","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2013-5915","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-5915","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2013-5915","description":"The RSA-CRT implementation in PolarSSL before 1.2.9 does not properly perform Montgomery multiplication, which might allow remote attackers to conduct a timing side-channel attack and retrieve RSA private keys.","status":"published","published":"2013-10-04T17:00:00Z","modified":"2024-08-06T17:29:42.703Z","updated_at":"2026-11-02T14:34:55.098814Z"}],"euvd":[{"id":"EUVD-2013-5749","description":"The RSA-CRT implementation in PolarSSL before 1.2.9 does not properly perform Montgomery multiplication, which might allow remote attackers to conduct a timing side-channel attack and retrieve RSA private keys.","status":"published","published":"2013-10-04T17:00:00Z","modified":"2024-08-06T17:29:42Z","updated_at":"2026-11-03T01:56:27.6803Z"}],"ghsa":[{"id":"GHSA-ff9h-pchm-fq33","title":"The RSA-CRT implementation in PolarSSL before 1.2.9 does not properly perform Montgomery...","description":"The RSA-CRT implementation in PolarSSL before 1.2.9 does not properly perform Montgomery multiplication, which might allow remote attackers to conduct a timing side-channel attack and retrieve RSA private keys.","status":"published","published":"2022-05-17T04:58:37Z","modified":"2023-01-28T05:02:57Z","updated_at":"2026-11-02T14:43:52.645209Z"}],"nvd":[{"id":"CVE-2013-5915","description":"The RSA-CRT implementation in PolarSSL before 1.2.9 does not properly perform Montgomery multiplication, which might allow remote attackers to conduct a timing side-channel attack and retrieve RSA private keys.","status":"published","published":"2013-10-04T17:55:09.993Z","modified":"2026-06-16T23:59:44.543Z","cvss":[{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-310"],"updated_at":"2026-11-02T14:02:38.715467Z"}],"osv":[{"id":"DSA-2782-1","title":"polarssl - several","status":"published","published":"2013-10-20T00:00:00Z","modified":"2026-03-09T01:23:17.348474Z","updated_at":"2026-11-02T15:46:15.489951Z"},{"id":"MGASA-2013-0353","title":"Updated polarssl, pdns \u0026 ragel packages fix CVE-2013-5915","description":"Updated polarssl packages fix security vulnerability:\n\nThe researchers Cyril Arnaud and Pierre-Alain Fouque investigated the PolarSSL\nRSA implementation and discovered a bias in the implementation of the Montgomery\nmultiplication that we used. For which they then show that it can be used to\nmount an attack on the RSA key. Although their test attack is done on a local\nsystem, there seems to be enough indication that this can properly be performed\nfrom a remote system as well (CVE-2013-5915).\n\nAlso, the pdns package has been updated to work with the updated polarssl.\n","status":"published","published":"2013-11-30T21:15:26Z","modified":"2026-04-16T06:22:37.461449761Z","updated_at":"2026-11-02T15:49:39.121227Z"},{"id":"UBUNTU-CVE-2013-5915","description":"The RSA-CRT implementation in PolarSSL before 1.2.9 does not properly perform Montgomery multiplication, which might allow remote attackers to conduct a timing side-channel attack and retrieve RSA private keys.","status":"withdrawn","published":"2013-10-04T17:55:00Z","modified":"2025-07-16T07:17:10.211643Z","updated_at":"2026-11-02T15:54:07.421078Z"}]}}