SB2016072609 - Information disclosure in Fortinet, FortiOS

Description

This security bulletin contains information about 1 vulnerability.

1) Information disclosure (CVE-ID: CVE-2015-5738)

CWE-ID: CWE-200 - Exposure of sensitive information to an unauthorized actor

CVSSv4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Green

The vulnerability allows a remote non-authenticated attacker to gain access to sensitive information.

The RSA-CRT implementation in the Cavium Software Development Kit (SDK) 2.x, when used on OCTEON II CN6xxx Hardware on Linux to support TLS with Perfect Forward Secrecy (PFS), makes it easier for remote attackers to obtain private RSA keys by conducting a Lenstra side-channel attack.

Remediation

Install update from vendor's website.

References

• http://fortiguard.com/advisory/rsa-crt-key-leak-under-certain-conditions
• https://people.redhat.com/~fweimer/rsa-crt-leaks.pdf
• https://support.f5.com/kb/en-us/solutions/public/k/91/sol91245485.html