Описание
libsecp256k1 contains side-channel timing attack
Versions of libsecp256k1 prior to 0.3.1 did not execute Scalar::check_overflow in constant time. This allows an attacker to potentially leak information via a timing attack. The flaw was corrected by modifying Scalar::check_overflow to execute in constant time.
Пакеты
Наименование
libsecp256k1
rust
Затронутые версииВерсия исправления
< 0.3.1
0.3.1
Связанные уязвимости
CVSS3: 7.5
nvd
около 5 лет назад
An issue was discovered in the libsecp256k1 crate before 0.3.1 for Rust. Scalar::check_overflow allows a timing side-channel attack; consequently, attackers can obtain sensitive information.