Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2024-23342

Опубликовано: 23 янв. 2024
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 7.4

Описание

The ecdsa PyPI package is a pure Python implementation of ECC (Elliptic Curve Cryptography) with support for ECDSA (Elliptic Curve Digital Signature Algorithm), EdDSA (Edwards-curve Digital Signature Algorithm) and ECDH (Elliptic Curve Diffie-Hellman). Versions 0.18.0 and prior are vulnerable to the Minerva attack. As of time of publication, no known patched version exists.

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

needs-triage

esm-apps/bionic

needs-triage

esm-apps/focal

needs-triage

esm-apps/jammy

needs-triage

esm-apps/noble

needs-triage

esm-apps/resolute

needs-triage

esm-infra-legacy/xenial

needs-triage

esm-infra/xenial

ignored

end of ESM support, was needs-triage
focal

ignored

end of standard support, was needs-triage

Показывать по

EPSS

Процентиль: 59%
0.00985
Низкий

7.4 High

CVSS3

Связанные уязвимости

CVSS3: 7.4
redhat
больше 2 лет назад

The `ecdsa` PyPI package is a pure Python implementation of ECC (Elliptic Curve Cryptography) with support for ECDSA (Elliptic Curve Digital Signature Algorithm), EdDSA (Edwards-curve Digital Signature Algorithm) and ECDH (Elliptic Curve Diffie-Hellman). Versions 0.18.0 and prior are vulnerable to the Minerva attack. As of time of publication, no known patched version exists.

CVSS3: 7.4
nvd
больше 2 лет назад

The `ecdsa` PyPI package is a pure Python implementation of ECC (Elliptic Curve Cryptography) with support for ECDSA (Elliptic Curve Digital Signature Algorithm), EdDSA (Edwards-curve Digital Signature Algorithm) and ECDH (Elliptic Curve Diffie-Hellman). Versions 0.18.0 and prior are vulnerable to the Minerva attack. As of time of publication, no known patched version exists.

msrc
6 дней назад

python-ecdsa vulnerable to Minerva attack on P-256

CVSS3: 7.4
debian
больше 2 лет назад

The `ecdsa` PyPI package is a pure Python implementation of ECC (Ellip ...

CVSS3: 7.4
github
больше 2 лет назад

Minerva timing attack on P-256 in python-ecdsa

EPSS

Процентиль: 59%
0.00985
Низкий

7.4 High

CVSS3