HIGH✓ PATCH🇵🇱 Wersja polska

CVE-2017-5681

CVSS 7.5v3.0pub. 2017-03-07upd. 2026-05-13

The RSA-CRT implementation in the Intel QuickAssist Technology (QAT) Engine for OpenSSL versions prior to 0.5.19 may allow remote attackers to obtain private RSA keys by conducting a Lenstra side-channel attack.

CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

  • Intel Quickassist Technology Engine

    APP
    Intel
    0.5.18
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
CWE
References

Related vulnerabilities

CVE-2022-43507HIGH7.5same product

Improper buffer restrictions in the Intel(R) QAT Engine for OpenSSL before version 0.6.16 may allow a privileg...

CVE-2021-45046CRITICAL9.0⚠ KEVPL ✓same vendor

Apache Log4j: niekompletna naprawa CVE-2021-44228 — RCE przez JNDI Lookup

CVE-2021-44228CRITICAL10.0⚠ KEVPL ✓same vendor

Apache Log4j2 Log4Shell — RCE przez podatną funkcję JNDI lookup

CVE-2017-5689CRITICAL9.8⚠ KEVPL ✓same vendor

Privilege Escalation w Intel AMT/ISM/SBT — nieautoryzowany dostęp systemowy

CVE-2024-23497CRITICAL9.3PL ✓same vendor

Out-of-bounds write w sterowniku Linux dla Intel Ethernet 800 Series — privilege escalation