VULNERABILITY INTELLIGENCE
CVE-2015-8618
CVSS score7.5 HIGH
EPSS probability2.63%
CISA KEVNot currently listed
Published2016-01-27
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Description
The Int.Exp Montgomery code in the math/big library in Go 1.5.x before 1.5.3 mishandles carry propagation and produces incorrect output, which makes it easier for attackers to obtain private RSA keys via unspecified vectors.
Weakness classification
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor