Поиск уязвимостей
Количество 13
Количество 13
ALT-PU-2017-2781
ALT-PU-2017-2781: package `libcryptopp` update to version 5.6.5-alt1
CVE-2016-3995
The timing attack protection in Rijndael::Enc::ProcessAndXorBlock and Rijndael::Dec::ProcessAndXorBlock in Crypto++ (aka cryptopp) before 5.6.4 may be optimized out by the compiler, which allows attackers to conduct timing attacks.
CVE-2016-3995
The timing attack protection in Rijndael::Enc::ProcessAndXorBlock and Rijndael::Dec::ProcessAndXorBlock in Crypto++ (aka cryptopp) before 5.6.4 may be optimized out by the compiler, which allows attackers to conduct timing attacks.
CVE-2016-3995
The timing attack protection in Rijndael::Enc::ProcessAndXorBlock and ...
GHSA-rfvf-996j-mmvf
The timing attack protection in Rijndael::Enc::ProcessAndXorBlock and Rijndael::Dec::ProcessAndXorBlock in Crypto++ (aka cryptopp) before 5.6.4 may be optimized out by the compiler, which allows attackers to conduct timing attacks.
CVE-2017-9434
Crypto++ (aka cryptopp) through 5.6.5 contains an out-of-bounds read vulnerability in zinflate.cpp in the Inflator filter.
CVE-2017-9434
Crypto++ (aka cryptopp) through 5.6.5 contains an out-of-bounds read vulnerability in zinflate.cpp in the Inflator filter.
CVE-2017-9434
Crypto++ (aka cryptopp) through 5.6.5 contains an out-of-bounds read v ...
CVE-2016-7420
Crypto++ (aka cryptopp) through 5.6.4 does not document the requirement for a compile-time NDEBUG definition disabling the many assert calls that are unintended in production use, which might allow context-dependent attackers to obtain sensitive information by leveraging access to process memory after an assertion failure, as demonstrated by reading a core dump.
CVE-2016-7420
Crypto++ (aka cryptopp) through 5.6.4 does not document the requirement for a compile-time NDEBUG definition disabling the many assert calls that are unintended in production use, which might allow context-dependent attackers to obtain sensitive information by leveraging access to process memory after an assertion failure, as demonstrated by reading a core dump.
CVE-2016-7420
Crypto++ (aka cryptopp) through 5.6.4 does not document the requiremen ...
GHSA-xh64-jjg2-744m
Crypto++ (aka cryptopp) through 5.6.4 does not document the requirement for a compile-time NDEBUG definition disabling the many assert calls that are unintended in production use, which might allow context-dependent attackers to obtain sensitive information by leveraging access to process memory after an assertion failure, as demonstrated by reading a core dump.
GHSA-2c95-vmhq-43cg
Crypto++ (aka cryptopp) through 5.6.5 contains an out-of-bounds read vulnerability in zinflate.cpp in the Inflator filter.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2017-2781 ALT-PU-2017-2781: package `libcryptopp` update to version 5.6.5-alt1 | CVSS3: 7.5 | почти 9 лет назад | |
 | CVE-2016-3995 The timing attack protection in Rijndael::Enc::ProcessAndXorBlock and Rijndael::Dec::ProcessAndXorBlock in Crypto++ (aka cryptopp) before 5.6.4 may be optimized out by the compiler, which allows attackers to conduct timing attacks. | CVSS3: 7.5 | 2% Низкий | больше 9 лет назад |
 | CVE-2016-3995 The timing attack protection in Rijndael::Enc::ProcessAndXorBlock and Rijndael::Dec::ProcessAndXorBlock in Crypto++ (aka cryptopp) before 5.6.4 may be optimized out by the compiler, which allows attackers to conduct timing attacks. | CVSS3: 7.5 | 2% Низкий | больше 9 лет назад |
| CVE-2016-3995 The timing attack protection in Rijndael::Enc::ProcessAndXorBlock and ... | CVSS3: 7.5 | 2% Низкий | больше 9 лет назад |
| GHSA-rfvf-996j-mmvf The timing attack protection in Rijndael::Enc::ProcessAndXorBlock and Rijndael::Dec::ProcessAndXorBlock in Crypto++ (aka cryptopp) before 5.6.4 may be optimized out by the compiler, which allows attackers to conduct timing attacks. | CVSS3: 7.5 | 2% Низкий | больше 4 лет назад |
| CVE-2017-9434 Crypto++ (aka cryptopp) through 5.6.5 contains an out-of-bounds read vulnerability in zinflate.cpp in the Inflator filter. | CVSS3: 5.3 | 2% Низкий | больше 9 лет назад |
| CVE-2017-9434 Crypto++ (aka cryptopp) through 5.6.5 contains an out-of-bounds read vulnerability in zinflate.cpp in the Inflator filter. | CVSS3: 5.3 | 2% Низкий | больше 9 лет назад |
| CVE-2017-9434 Crypto++ (aka cryptopp) through 5.6.5 contains an out-of-bounds read v ... | CVSS3: 5.3 | 2% Низкий | больше 9 лет назад |
| CVE-2016-7420 Crypto++ (aka cryptopp) through 5.6.4 does not document the requirement for a compile-time NDEBUG definition disabling the many assert calls that are unintended in production use, which might allow context-dependent attackers to obtain sensitive information by leveraging access to process memory after an assertion failure, as demonstrated by reading a core dump. | CVSS3: 5.9 | 2% Низкий | около 10 лет назад |
| CVE-2016-7420 Crypto++ (aka cryptopp) through 5.6.4 does not document the requirement for a compile-time NDEBUG definition disabling the many assert calls that are unintended in production use, which might allow context-dependent attackers to obtain sensitive information by leveraging access to process memory after an assertion failure, as demonstrated by reading a core dump. | CVSS3: 5.9 | 2% Низкий | около 10 лет назад |
| CVE-2016-7420 Crypto++ (aka cryptopp) through 5.6.4 does not document the requiremen ... | CVSS3: 5.9 | 2% Низкий | около 10 лет назад |
| GHSA-xh64-jjg2-744m Crypto++ (aka cryptopp) through 5.6.4 does not document the requirement for a compile-time NDEBUG definition disabling the many assert calls that are unintended in production use, which might allow context-dependent attackers to obtain sensitive information by leveraging access to process memory after an assertion failure, as demonstrated by reading a core dump. | CVSS3: 5.9 | 2% Низкий | больше 4 лет назад |
| GHSA-2c95-vmhq-43cg Crypto++ (aka cryptopp) through 5.6.5 contains an out-of-bounds read vulnerability in zinflate.cpp in the Inflator filter. | CVSS3: 5.3 | 2% Низкий | больше 4 лет назад |
Уязвимостей на страницу