Описание
Duplicate Advisory: ed25519-dalek Double Public Key Signing Function Oracle Attack
Duplicate Advisory
This advisory has been withdrawn because it is a duplicate of GHSA-w5vr-6qhr-36cc. This link is maintained to preserve external references.
Original Description
The ed25519-dalek crate before 2 for Rust allows a double public key signing function oracle attack. The Keypair implementation leads to a simple computation for extracting a private key.
Пакеты
Наименование
ed25519-dalek
rust
Затронутые версииВерсия исправления
< 2.0.0
2.0.0
5.9 Medium
CVSS3
Дефекты
CWE-497
5.9 Medium
CVSS3
Дефекты
CWE-497