CVE-2015-7744: MariaDB

Medium severity, CVSS 5.9. EPSS: 5% chance of exploitation in the next 30 days.

wolfSSL (formerly CyaSSL) before 3.6.8 does not properly handle faults associated with the Chinese Remainder Theorem (CRT) process when allowing ephemeral key exchange without low memory optimizations on a server, which makes it easier for remote attackers to obtain private RSA keys by capturing TLS handshakes, aka a Lenstra attack.

Affected products

• MariaDB MariaDB: from 5.5.0, before 5.5.46 (fixed in 5.5.46); from 10.0.0, before 10.0.22 (fixed in 10.0.22); from 10.1.0, before 10.1.9 (fixed in 10.1.9)
• Opensuse Leap: version 42.1 only
• Opensuse Opensuse: version 13.1 only; version 13.2 only
• wolfSSL wolfSSL: before 3.6.8 (fixed in 3.6.8)

Published 2016-01-22. Last modified 2026-06-17.