CVE-2015-5738

high F5
CVSS v3 Base Score
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS Score
0.8%
Exploitation probability in 30 days
Top 26% most likely to be exploited
Attack Characteristics
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Confidentiality
High
Integrity
None
Availability
None
Published: July 26, 2016 (3578 days ago)
Last Modified: May 6, 2026
Vendor: F5
Source: NVD

Description

The RSA-CRT implementation in the Cavium Software Development Kit (SDK) 2.x, when used on OCTEON II CN6xxx Hardware on Linux to support TLS with Perfect Forward Secrecy (PFS), makes it easier for remote attackers to obtain private RSA keys by conducting a Lenstra side-channel attack.

CWE

CWE-200

Affected Products

marvell software development kitf5 traffix signaling delivery controller

References

🔗 fortiguard.com 🔗 people.redhat.com 🔗 support.f5.com 🔗 fortiguard.com 🔗 people.redhat.com