There is an overflow bug in the x64_64 Montgomery squaring procedure used in exponentiation with 512-bit moduli
Details
Security vulnerability affects the openssl1.1-compat package. There is an overflow bug in the x64_64 Montgomery squaring procedure used in exponentiation with 512-bit moduli.