Описание
The curve25519-dalek crate before 4.1.3 for Rust has a constant-time operation on elliptic curve scalars that is removed by LLVM.
Ссылки
- Product
- Issue TrackingPatch
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 4.1.3 (исключая)
cpe:2.3:a:dalek:curve25519-dalek:*:*:*:*:*:rust:*:*
EPSS
Процентиль: 1%
0.00011
Низкий
2.9 Low
CVSS3
5.1 Medium
CVSS3
Дефекты
CWE-733
Связанные уязвимости
CVSS3: 2.9
ubuntu
5 месяцев назад
The curve25519-dalek crate before 4.1.3 for Rust has a constant-time operation on elliptic curve scalars that is removed by LLVM.
CVSS3: 2.9
redhat
5 месяцев назад
The curve25519-dalek crate before 4.1.3 for Rust has a constant-time operation on elliptic curve scalars that is removed by LLVM.
CVSS3: 2.9
debian
5 месяцев назад
The curve25519-dalek crate before 4.1.3 for Rust has a constant-time o ...
github
больше 1 года назад
curve25519-dalek has timing variability in `curve25519-dalek`'s `Scalar29::sub`/`Scalar52::sub`
EPSS
Процентиль: 1%
0.00011
Низкий
2.9 Low
CVSS3
5.1 Medium
CVSS3
Дефекты
CWE-733