Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The BN_sqr implementation in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k does not properly calculate the square of a BIGNUM value, which might make it easier for remote attackers to defeat cryptographic protection mechanisms via unspecified vectors, related to crypto/bn/asm/mips.pl, crypto/bn/asm/x86_64-gcc.c, and crypto/bn/bn_asm.c.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
25 versions affected across 1 product
@Rob1Ham They earned their medals by reporting core cryptography bugs in OpenSSL... (CVE-2014-3570) 🏅🏆
Post summary
The tweet only notes that CVE-2014-3570, a core cryptography bug in OpenSSL, earned medals for the reporter, with no additional technical or exploitation details.
26 of 26 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | openssl | openssl | - | - | - |
| App | openssl | openssl | 1.0.0a | - | - |
| App | openssl | openssl | 1.0.0b | - | - |
| App | openssl | openssl | 1.0.0c | - | - |
| App | openssl | openssl | 1.0.0d | - | - |
| App | openssl | openssl | 1.0.0e | - | - |
| App | openssl | openssl | 1.0.0f | - | - |
| App | openssl | openssl | 1.0.0g | - | - |
| App | openssl | openssl | 1.0.0h | - | - |
| App | openssl | openssl | 1.0.0i | - | - |
| App | openssl | openssl | 1.0.0j | - | - |
| App | openssl | openssl | 1.0.0k | - | - |
| App | openssl | openssl | 1.0.0l | - | - |
| App | openssl | openssl | 1.0.0m | - | - |
| App | openssl | openssl | 1.0.0n | - | - |
| App | openssl | openssl | 1.0.0o | - | - |
| App | openssl | openssl | 1.0.1a | - | - |
| App | openssl | openssl | 1.0.1b | - | - |
| App | openssl | openssl | 1.0.1c | - | - |
| App | openssl | openssl | 1.0.1d | - | - |
| App | openssl | openssl | 1.0.1e | - | - |
| App | openssl | openssl | 1.0.1f | - | - |
| App | openssl | openssl | 1.0.1g | - | - |
| App | openssl | openssl | 1.0.1h | - | - |
| App | openssl | openssl | 1.0.1i | - | - |
| App | openssl | openssl | 1.0.1j | - | - |