CVE-2007-3108: OpenSSL

Low severity, CVSS 1.2. EPSS: 0.4% chance of exploitation in the next 30 days.

The BN_from_montgomery function in crypto/bn/bn_mont.c in OpenSSL 0.9.8e and earlier does not properly perform Montgomery multiplication, which might allow local users to conduct a side-channel attack and retrieve RSA private keys.

Affected products

• OpenSSL OpenSSL: up to and including 0.9.8e

Published 2007-08-08. Last modified 2026-06-16.