Loading vulnerability…
OpenSSL x86_64 Montgomery Squaring Private-Key Disclosure
CVE-2017-3732 is a carry-propagation defect in OpenSSL's x86_64 Montgomery squaring implementation used by modular exponentiation operations, including BN_mod_exp. The flaw can cause incorrect cryptographic calculations and potentially leak information about private keys used in RSA, DSA, or Diffie-Hellman operations. It affects OpenSSL 1.0.2 releases before 1.0.2k and OpenSSL 1.1.0 releases before 1.1.0d. Elliptic-curve algorithms are not affected.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
A remote attacker may obtain information that contributes to recovery of a target private key, resulting in high confidentiality impact. Exploitation against RSA and DSA was assessed as exceptionally difficult and unlikely. Diffie-Hellman is the comparatively feasible target, but exploitation remains highly resource-intensive; much of the key-deduction work can be performed offline. The issue does not inherently provide integrity impact, code execution, or denial of service.
If you can’t patch tonight, do this now.
No complete workaround is identified. Until updates can be deployed, reduce exposure of services using vulnerable OpenSSL builds, particularly externally reachable services offering finite-field DHE. Avoid persistent Diffie-Hellman parameters and reuse of a Diffie-Hellman private key across clients, and prefer unaffected elliptic-curve key-exchange configurations where operationally suitable.
Patch, then assume compromise.
Upgrade OpenSSL 1.0.2 deployments to 1.0.2k or later, and OpenSSL 1.1.0 deployments to 1.1.0d or later. Apply the vendor-supported security update for products that bundle OpenSSL, then restart affected processes or systems so that they load the corrected cryptographic library.
No public exploits tracked yet. Mallory keeps watching.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
17 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.