[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fhWrAySByGd2deAGoiOqaidxhda4Z22WtVd5GFk2F3Mg":3,"g5a-risk:CVE-2015-7744":192},{"success":4,"data":5,"meta":190},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":26,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":61,"references":62,"referencesCount":120,"weaknesses":121,"weaknessesCount":125,"isActivelyExploited":126,"cisaInfo":26,"otxData":26,"relatedBlogPosts":127,"seoMetadata":128,"configurations":153,"relatedVendorCves":188,"notableEvents":189},"CVE-2015-7744","What is CVE-2015-7744?","wolfSSL (formerly CyaSSL) before 3.6.8 does not properly handle faults associated with the Chinese Remainder Theorem (CRT) process when allowing ephemeral key exchange without low memory optimizations on a server, which makes it easier for remote attackers to obtain private RSA keys by capturing TLS handshakes, aka a Lenstra attack.","wolfSSL (formerly CyaSSL) before 3.6.8 does not properly handle faults associated with the Chinese Remainder Theorem (CRT) process when allowing ephemeral ke...","2016-01-22T15:59:04.57","2025-04-12T10:46:40.837",5.9,"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":29,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","HIGH","NONE","UNCHANGED","MEDIUM",null,2.2,3.6,[30],{"Source":17,"Type":18,"CVSSData":31,"BaseSeverity":36,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":32,"VectorString":33,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":34,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":35,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:H\u002FAu:N\u002FC:P\u002FI:N\u002FA:N","PARTIAL",2.6,"LOW",4.9,2.9,0.05031,[39,39,39,39,39,39,39],"Medium",[43,47,52,55,58],{"vendor":44,"product":44,"version":45,"criteria":46,"vulnerable":4},"wolfssl","*","cpe:2.3:a:wolfssl:wolfssl:*:*:*:*:*:*:*:*",{"vendor":48,"product":49,"version":50,"criteria":51,"vulnerable":4},"opensuse","leap","42.1","cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*",{"vendor":48,"product":48,"version":53,"criteria":54,"vulnerable":4},"13.1","cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*",{"vendor":48,"product":48,"version":56,"criteria":57,"vulnerable":4},"13.2","cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*",{"vendor":59,"product":59,"version":45,"criteria":60,"vulnerable":4},"mariadb","cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",5,[63,69,72,78,82,85,91,96,99,102,104,106,108,110,112,114,116,118],{"url":64,"source":65,"tags":66},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2016-02\u002Fmsg00015.html","Opensuse",[67,68],"Mailing List","Third Party Advisory",{"url":70,"source":65,"tags":71},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2016-02\u002Fmsg00016.html",[67,68],{"url":73,"source":74,"tags":75},"http:\u002F\u002Fwolfssl.com\u002FwolfSSL\u002FDocs-wolfssl-changelog.html","Wolfssl",[76,77],"Release Notes","Vendor Advisory",{"url":79,"source":80,"tags":81},"http:\u002F\u002Fwww.oracle.com\u002Ftechnetwork\u002Ftopics\u002Fsecurity\u002Fbulletinapr2016-2952098.html","Oracle",[68],{"url":83,"source":80,"tags":84},"http:\u002F\u002Fwww.oracle.com\u002Ftechnetwork\u002Ftopics\u002Fsecurity\u002Fcpujan2016-2367955.html",[77],{"url":86,"source":87,"tags":88},"http:\u002F\u002Fwww.securitytracker.com\u002Fid\u002F1034708","Securitytracker",[89,68,90],"Broken Link","VDB Entry",{"url":92,"source":93,"tags":94},"https:\u002F\u002Fpeople.redhat.com\u002F~fweimer\u002Frsa-crt-leaks.pdf","Red Hat",[95,68],"Exploit",{"url":97,"source":93,"tags":98},"https:\u002F\u002Fsecurityblog.redhat.com\u002F2015\u002F09\u002F02\u002Ffactoring-rsa-keys-with-tls-perfect-forward-secrecy\u002F",[95,68],{"url":100,"source":74,"tags":101},"https:\u002F\u002Fwolfssl.com\u002FwolfSSL\u002FBlog\u002FEntries\u002F2015\u002F9\u002F17_Two_Vulnerabilities_Recently_Found%2C_An_Attack_on_RSA_using_CRT_and_DoS_Vulnerability_With_DTLS.html",[77],{"url":64,"source":65,"tags":103},[67,68],{"url":70,"source":65,"tags":105},[67,68],{"url":73,"source":74,"tags":107},[76,77],{"url":79,"source":80,"tags":109},[68],{"url":83,"source":80,"tags":111},[77],{"url":86,"source":87,"tags":113},[89,68,90],{"url":92,"source":93,"tags":115},[95,68],{"url":97,"source":93,"tags":117},[95,68],{"url":100,"source":74,"tags":119},[77],18,[122],{"id":123,"name":123,"description":124},"Unknown","NVD-CWE-noinfo",1,false,[],{"title":129,"metaDescription":130,"keywords":131,"canonicalUrl":132,"structuredData":133},"What is CVE-2015-7744? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2015-7744, a medium severity cyber security vulnerability from 2016. wolfSSL (formerly CyaSSL) before 3.6.8 does not properly h...","CVE-2015-7744, CVE-2015-7744 vulnerability, CVE-2015-7744 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2016, CVSS score, exploit, patch, remediation, wolfssl security, opensuse security, mariadb security, wolfssl vulnerability, leap vulnerability, opensuse vulnerability, mariadb vulnerability","\u002Fwhat-is\u002Fcve-2015-7744",{"@context":134,"@type":135,"headline":129,"description":130,"datePublished":10,"dateModified":11,"author":136,"publisher":140,"about":144,"mainEntityOfPage":148,"articleSection":151,"keywords":152},"https:\u002F\u002Fschema.org","TechArticle",{"@type":137,"name":138,"url":139},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":137,"name":138,"url":139,"logo":141},{"@type":142,"url":143},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":145,"name":6,"description":146,"additionalType":147},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":149,"@id":150},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2015-7744","Cybersecurity","CVE-2015-7744, CVE-2015-7744 vulnerability, CVE-2015-7744 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[154,162,172],{"Operator":26,"Negate":26,"Nodes":155},[156],{"Operator":157,"Negate":26,"CPEMatch":158},"OR",[159],{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":160,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":161,"VersionEndIncluding":26},"DCCE5683-CB64-46B4-8936-B1FCDD586892","3.6.8",{"Operator":26,"Negate":26,"Nodes":163},[164],{"Operator":157,"Negate":26,"CPEMatch":165},[166,168,170],{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":167,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"4863BE36-D16A-4D75-90D9-FD76DB5B48B7",{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":169,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"A10BC294-9196-425F-9FB0-B1625465B47F",{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":171,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"03117DF1-3BEC-4B8D-AD63-DBBDB2126081",{"Operator":26,"Negate":26,"Nodes":173},[174],{"Operator":157,"Negate":26,"CPEMatch":175},[176,180,184],{"Vulnerable":4,"Criteria":60,"MatchCriteriaID":177,"VersionStartExcluding":26,"VersionStartIncluding":178,"VersionEndExcluding":179,"VersionEndIncluding":26},"B570B154-3385-45E5-BD26-F8F114ADD39C","5.5.0","5.5.46",{"Vulnerable":4,"Criteria":60,"MatchCriteriaID":181,"VersionStartExcluding":26,"VersionStartIncluding":182,"VersionEndExcluding":183,"VersionEndIncluding":26},"4539D293-8B6D-4ADB-98C9-5C7FF5B01CEF","10.0.0","10.0.22",{"Vulnerable":4,"Criteria":60,"MatchCriteriaID":185,"VersionStartExcluding":26,"VersionStartIncluding":186,"VersionEndExcluding":187,"VersionEndIncluding":26},"70B6417F-7B57-4DDE-8663-919C14C13B1D","10.1.0","10.1.9",[],[],{"lastModified":11,"cacheTime":191,"version":32},1792350029706,{"score":193,"band":41,"action":194,"scoredAt":195},42,"Plan remediation","2026-10-17T07:55:31.895989+00:00"]