CVE-2016-6882

MatrixSSL before 3.8.7, when the DHE_RSA based cipher suite is supported, makes it easier for remote attackers to obtain RSA private key information by conducting a Lenstra side-channel attack.

• CWE-200
• CWE-320

• http://www.openwall.com/lists/oss-security/2016/08/19/7Mailing List, Patch
• http://www.securityfocus.com/bid/91488
• https://access.redhat.com/blogs/766093/posts/1976703Third Party Advisory
• https://github.com/matrixssl/matrixssl/blob/master/CHANGES.md#validation-of-rsa-signature-creationPatch, Release Notes
• https://people.redhat.com/~fweimer/rsa-crt-leaks.pdfTechnical Description
• http://www.openwall.com/lists/oss-security/2016/08/19/7Mailing List, Patch
• http://www.securityfocus.com/bid/91488
• https://access.redhat.com/blogs/766093/posts/1976703Third Party Advisory
• https://github.com/matrixssl/matrixssl/blob/master/CHANGES.md#validation-of-rsa-signature-creationPatch, Release Notes
• https://people.redhat.com/~fweimer/rsa-crt-leaks.pdfTechnical Description

Published

Mar 3, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-6875Infinite recursion in wddx in Facebook HHVM before 3.15.0 al…
• CVE-2016-6876The RESOLV::lookup iRule command in F5 BIG-IP LTM, APM, ASM,…
• CVE-2016-6877Citrix XenMobile Server before 10.5.0.24 allows man-in-the-m…
• CVE-2016-6878The Curve25519 code in botan before 1.11.31, on systems with…
• CVE-2016-6879The X509_Certificate::allowed_usage function in botan 1.11.x…
• CVE-2016-6881The zlib_refill function in libavformat/swfdec.c in FFmpeg b…
• CVE-2016-6883MatrixSSL before 3.8.3 configured with RSA Cipher Suites all…
• CVE-2016-6884TLS cipher suites with CBC mode in TLS 1.1 and 1.2 in Matrix…
• CVE-2016-6885The pstm_exptmod function in MatrixSSL before 3.8.4 allows r…
• CVE-2016-6886The pstm_reverse function in MatrixSSL before 3.8.4 allows r…
• CVE-2016-6887The pstm_exptmod function in MatrixSSL 3.8.6 and earlier doe…
• CVE-2016-6888Integer overflow in the net_tx_pkt_init function in hw/net/n…4.4