What is CVE-2015-5738?

CVE-2015-5738 is a high-severity vulnerability in F5 Traffix Signaling Delivery Controller, classified under Information Disclosure. CVSS score: 7.5/10. Published 2016-07-26.

How severe is CVE-2015-5738?

High severity. CVSS v3 base score is 7.5 out of 10.

Is CVE-2015-5738 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Information disclosure in F5 Traffix Signaling Delivery Controller

CVE-2015-5738

The RSA-CRT implementation in the Cavium Software Development Kit (SDK) 2.x, when used on OCTEON II CN6xxx Hardware on Linux to support TLS with Perfect Forward Secrecy (PFS), makes it easier for remote attackers to obtain private RSA keys by conducting a Lenstra side-channel attack.

Vulnerability class: Information Disclosure

EPSS: 0.024 (82.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

F5 Traffix_signaling_delivery_controller
Marvell Octeon_ii_cn6000
Marvell Octeon_ii_cn6010
Marvell Octeon_ii_cn6020
Marvell Software_development_kit — versions 2.0
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

Public proof-of-concept exploits

thdusdl1219/CVE-Study

References

cve@mitre.org (Technical Description, Third Party Advisory, x_refsource_MISC)
cve@mitre.org (x_refsource_CONFIRM, Third Party Advisory)
cve@mitre.org (x_refsource_CONFIRM, Broken Link)

Frequently asked questions

What is CVE-2015-5738?: CVE-2015-5738 is a high-severity vulnerability in F5 Traffix Signaling Delivery Controller, classified under Information Disclosure. CVSS score: 7.5/10. Published 2016-07-26.
How severe is CVE-2015-5738?: High severity. CVSS v3 base score is 7.5 out of 10.
Is CVE-2015-5738 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.