{"id":"CVE-2017-15361","aliases":["EUVD-2017-6817","GHSA-qcrq-wp7v-84jc","MGASA-2017-0395"],"status":"published","title":"The Infineon RSA library 1.02.013 in Infineon Trusted Platform Module (TPM) firmware, such as...","description":"The Infineon RSA library 1.02.013 in Infineon Trusted Platform Module (TPM) firmware, such as versions before 0000000000000422 - 4.34, before 000000000000062b - 6.43, and before 0000000000008521 - 133.33, mishandles RSA key generation, which makes it easier for attackers to defeat various cryptographic protection mechanisms via targeted attacks, aka ROCA. Examples of affected technologies include BitLocker with TPM 1.2, YubiKey 4 (before 4.3.5) PGP key generation, and the Cached User Data encryption feature in Chrome OS.","severity":{"version":"3.0","score":5.9,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.09825,"percentile":0.95587,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"published":"2017-10-16T17:00:00Z","modified":"2026-06-17T01:07:41Z","exploits":[{"source":"pocgithub","id":"0xxon/roca","title":"0xxon/roca","date":"2017-10-25","url":"https://github.com/0xxon/roca"},{"source":"pocgithub","id":"0xxon/zeek-plugin-roca","title":"0xxon/zeek-plugin-roca","date":"2017-10-25","url":"https://github.com/0xxon/zeek-plugin-roca"},{"source":"pocgithub","id":"Elbarbons/ROCA-attack-on-vulnerability-CVE-2017-15361","title":"Elbarbons/ROCA-attack-on-vulnerability-CVE-2017-15361","date":"2020-11-02","url":"https://github.com/Elbarbons/ROCA-attack-on-vulnerability-CVE-2017-15361"},{"source":"pocgithub","id":"lva/Infineon-CVE-2017-15361","title":"lva/Infineon-CVE-2017-15361","date":"2017-10-17","url":"https://github.com/lva/Infineon-CVE-2017-15361"},{"source":"pocgithub","id":"nsacyber/Detect-CVE-2017-15361-TPM","title":"nsacyber/Detect-CVE-2017-15361-TPM","date":"2017-10-19","url":"https://github.com/nsacyber/Detect-CVE-2017-15361-TPM"},{"source":"pocgithub","id":"titanous/rocacheck","title":"titanous/rocacheck","date":"2017-10-17","url":"https://github.com/titanous/rocacheck"}],"fixes":[{"ecosystem":"Mageia:6","package":"opensc","fixed_in":["0.15.0-2.1.mga6"],"sources":["osv"]},{"ecosystem":"Mageia:6","package":"libdigidocpp","fixed_in":["3.13.2-1.mga6"],"sources":["osv"]},{"ecosystem":"Mageia:6","package":"qdigidoc","fixed_in":["3.13.3-1.mga6"],"sources":["osv"]},{"ecosystem":"Mageia:6","package":"qesteidutil","fixed_in":["3.12.7-2.mga6"],"sources":["osv"]},{"ecosystem":"Mageia:6","package":"chrome-token-signing","fixed_in":["1.0.6-1.mga6"],"sources":["osv"]},{"ecosystem":"Mageia:6","package":"task-esteid","fixed_in":["3.13.3-1.mga6"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Mageia:6","package":"opensc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.15.0-2.1.mga6"}]}]},{"source":"osv","ecosystem":"Mageia:6","package":"libdigidocpp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.2-1.mga6"}]}]},{"source":"osv","ecosystem":"Mageia:6","package":"qdigidoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.3-1.mga6"}]}]},{"source":"osv","ecosystem":"Mageia:6","package":"qesteidutil","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.7-2.mga6"}]}]},{"source":"osv","ecosystem":"Mageia:6","package":"chrome-token-signing","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.6-1.mga6"}]}]},{"source":"osv","ecosystem":"Mageia:6","package":"task-esteid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.3-1.mga6"}]}]}],"products":[{"vendor":"infineon","product":"rsa_library"},{"vendor":"infineon","product":"trusted_platform_firmware"}],"references":[{"url":"https://www.infineon.com/cms/en/product/promopages/tpm-update/?redirId=59160","tags":["x_refsource_MISC","x_transferred","Mitigation","Vendor Advisory"]},{"url":"https://dan.enigmabridge.com/roca-vulnerability-impact-on-gemalto-idprime-net-smart-cards/","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Third Party Advisory"]},{"url":"https://blog.cr.yp.to/20171105-infineon.html","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03801en_us","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://monitor.certipath.com/rsatest","tags":["x_refsource_MISC","x_transferred","Mitigation","Third Party Advisory"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-18-058-01","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV170012","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://crocs.fi.muni.cz/public/papers/rsa_ccs17","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Mitigation","Third Party Advisory"]},{"url":"https://arstechnica.com/information-technology/2017/10/crypto-failure-cripples-millions-of-high-security-keys-750k-estonian-ids/","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Third Party Advisory"]},{"url":"http://support.lenovo.com/us/en/product_security/LEN-15552","tags":["x_refsource_CONFIRM","x_transferred","Mitigation","Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20171024-0001/","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://github.com/iadgov/Detect-CVE-2017-15361-TPM","tags":["x_refsource_MISC","x_transferred","Mitigation","Third Party Advisory"]},{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00104.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://www.kb.cert.org/vuls/id/307015","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred","Issue Tracking","Mitigation","Third Party Advisory","US Government Resource"]},{"url":"https://github.com/crocs-muni/roca","tags":["x_refsource_MISC","x_transferred","Mitigation","Third Party Advisory"]},{"url":"https://sites.google.com/a/chromium.org/dev/chromium-os/tpm_firmware_update","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Mitigation","Patch","Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-470231.pdf","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbhf03789en_us","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00148.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://www.yubico.com/support/security-advisories/ysa-2017-01/","tags":["x_refsource_CONFIRM","x_transferred","Mitigation","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/101484","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://keychest.net/roca","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Mitigation","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-15361"},{"url":"https://www.yubico.com/support/security-advisories/ysa-2017-01"},{"url":"https://security.netapp.com/advisory/ntap-20171024-0001"},{"url":"https://dan.enigmabridge.com/roca-vulnerability-impact-on-gemalto-idprime-net-smart-cards"},{"url":"https://arstechnica.com/information-technology/2017/10/crypto-failure-cripples-millions-of-high-security-keys-750k-estonian-ids"},{"url":"https://github.com/advisories/GHSA-qcrq-wp7v-84jc"},{"url":"https://advisories.mageia.org/MGASA-2017-0395.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=21944","tags":["report"]},{"url":"https://www.politsei.ee/en/uudised/uudis.dot?id=785151","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2017-15361","description":"The Infineon RSA library 1.02.013 in Infineon Trusted Platform Module (TPM) firmware, such as versions before 0000000000000422 - 4.34, before 000000000000062b - 6.43, and before 0000000000008521 - 133.33, mishandles RSA key generation, which makes it easier for attackers to defeat various cryptographic protection mechanisms via targeted attacks, aka ROCA. Examples of affected technologies include BitLocker with TPM 1.2, YubiKey 4 (before 4.3.5) PGP key generation, and the Cached User Data encryption feature in Chrome OS.","status":"published","published":"2017-10-16T17:00:00Z","modified":"2024-08-05T19:57:25.602Z","updated_at":"2026-11-02T14:33:14.556599Z"}],"euvd":[{"id":"EUVD-2017-6817","description":"The Infineon RSA library 1.02.013 in Infineon Trusted Platform Module (TPM) firmware, such as versions before 0000000000000422 - 4.34, before 000000000000062b - 6.43, and before 0000000000008521 - 133.33, mishandles RSA key generation, which makes it easier for attackers to defeat various cryptographic protection mechanisms via targeted attacks, aka ROCA. Examples of affected technologies include BitLocker with TPM 1.2, YubiKey 4 (before 4.3.5) PGP key generation, and the Cached User Data encryption feature in Chrome OS.","status":"published","published":"2017-10-16T17:00:00Z","modified":"2024-08-05T19:57:25Z","updated_at":"2026-11-03T02:23:14.401805Z"}],"ghsa":[{"id":"GHSA-qcrq-wp7v-84jc","title":"The Infineon RSA library 1.02.013 in Infineon Trusted Platform Module (TPM) firmware, such as...","description":"The Infineon RSA library 1.02.013 in Infineon Trusted Platform Module (TPM) firmware, such as versions before 0000000000000422 - 4.34, before 000000000000062b - 6.43, and before 0000000000008521 - 133.33, mishandles RSA key generation, which makes it easier for attackers to defeat various cryptographic protection mechanisms via targeted attacks, aka ROCA. Examples of affected technologies include BitLocker with TPM 1.2, YubiKey 4 (before 4.3.5) PGP key generation, and the Cached User Data encryption feature in Chrome OS.","status":"published","published":"2022-05-13T01:43:45Z","modified":"2025-04-20T03:47:55Z","cvss":[{"version":"3.0","score":5.9,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:01:54.559627Z"}],"nvd":[{"id":"CVE-2017-15361","description":"The Infineon RSA library 1.02.013 in Infineon Trusted Platform Module (TPM) firmware, such as versions before 0000000000000422 - 4.34, before 000000000000062b - 6.43, and before 0000000000008521 - 133.33, mishandles RSA key generation, which makes it easier for attackers to defeat various cryptographic protection mechanisms via targeted attacks, aka ROCA. Examples of affected technologies include BitLocker with TPM 1.2, YubiKey 4 (before 4.3.5) PGP key generation, and the Cached User Data encryption feature in Chrome OS.","status":"published","published":"2017-10-16T17:29:00.243Z","modified":"2026-06-17T01:07:41.507Z","cvss":[{"version":"3.0","score":5.9,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:04:03.426231Z"}],"osv":[{"id":"MGASA-2017-0395","title":"Updated opensc_etc packages fix security vulnerability","description":"A vulnerability, dubbed ROCA, was identified in an implementation of\nRSA key generation due to a fault in a code library developed by\nInfineon Technologies. The affected encryption keys are used to secure\nmany forms of technology, such as hardware chips, authentication tokens,\nsoftware packages, electronic documents, TLS/HTTPS keys, and PGP.\nInfineon Technologies’ smartcards, security tokens, and secure hardware\nchips produced since 2012 use the affected code library. Successful\nexploitation of this vulnerability results in an attacker being able to\nderive a private key from the public key, using prime factorization,\nwithin a practical time frame.\n\nThis vulnerability does not affect the RSA encryption algorithm itself,\nand only affects the implementation of the RSA encryption by Infineon\nTechnologies.\n\nThis vulnerability also affects Estonian ID cards that were issued after\n16th October 2014. With the updated packages the user is able to update\nhis/her certificates and continue using the online services that require\nID card.\n","status":"published","published":"2017-10-30T19:23:17Z","modified":"2026-04-16T06:23:03.702704895Z","updated_at":"2026-11-02T15:49:40.442238Z"}]}}