Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qmhp-mcqx-7ppw

Опубликовано: 09 сент. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 5.9

Описание

An issue was discovered in the mirage-crypto-ec package before 2.4.0 for OCaml. There is a timing side channel for NIST elliptic-curve scalar multiplication: the time required for a lookup can depend on a secret.

An issue was discovered in the mirage-crypto-ec package before 2.4.0 for OCaml. There is a timing side channel for NIST elliptic-curve scalar multiplication: the time required for a lookup can depend on a secret.

EPSS

Процентиль: 12%
0.00212
Низкий

5.9 Medium

CVSS3

Дефекты

CWE-208

Связанные уязвимости

CVSS3: 5.9
ubuntu
9 дней назад

An issue was discovered in the mirage-crypto-ec package before 2.4.0 for OCaml. There is a timing side channel for NIST elliptic-curve scalar multiplication: the time required for a lookup can depend on a secret.

CVSS3: 5.9
nvd
9 дней назад

An issue was discovered in the mirage-crypto-ec package before 2.4.0 for OCaml. There is a timing side channel for NIST elliptic-curve scalar multiplication: the time required for a lookup can depend on a secret.

CVSS3: 5.9
debian
9 дней назад

An issue was discovered in the mirage-crypto-ec package before 2.4.0 f ...

EPSS

Процентиль: 12%
0.00212
Низкий

5.9 Medium

CVSS3

Дефекты

CWE-208