Логотип exploitDog
bind:"CVE-2025-22866" OR bind:"CVE-2024-45341" OR bind:"CVE-2024-45336"
Консоль
Логотип exploitDog

exploitDog

bind:"CVE-2025-22866" OR bind:"CVE-2024-45341" OR bind:"CVE-2024-45336"

Количество 35

Количество 35

suse-cvrf логотип

SUSE-SU-2025:1555-1

3 месяца назад

Security update for go1.22-openssl

EPSS: Низкий
oracle-oval логотип

ELSA-2025-7466

около 1 месяца назад

ELSA-2025-7466: delve and golang security update (MODERATE)

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:01731-1

2 месяца назад

Security update for go1.23-openssl

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:0281-1

6 месяцев назад

Security update for go1.22

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:0280-1

6 месяцев назад

Security update for go1.23

EPSS: Низкий
redos логотип

ROS-20250212-16

6 месяцев назад

Множественные уязвимости golang

CVSS3: 6.1
EPSS: Низкий
oracle-oval логотип

ELSA-2025-3772

4 месяца назад

ELSA-2025-3772: go-toolset:ol8 security update (MODERATE)

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:0429-1

6 месяцев назад

Security update for govulncheck-vulndb

EPSS: Низкий
ubuntu логотип

CVE-2025-22866

6 месяцев назад

Due to the usage of a variable time instruction in the assembly implementation of an internal function, a small number of bits of secret scalars are leaked on the ppc64le architecture. Due to the way this function is used, we do not believe this leakage is enough to allow recovery of the private key when P-256 is used in any well known protocols.

CVSS3: 4
EPSS: Низкий
redhat логотип

CVE-2025-22866

6 месяцев назад

Due to the usage of a variable time instruction in the assembly implementation of an internal function, a small number of bits of secret scalars are leaked on the ppc64le architecture. Due to the way this function is used, we do not believe this leakage is enough to allow recovery of the private key when P-256 is used in any well known protocols.

CVSS3: 5.3
EPSS: Низкий
nvd логотип

CVE-2025-22866

6 месяцев назад

Due to the usage of a variable time instruction in the assembly implementation of an internal function, a small number of bits of secret scalars are leaked on the ppc64le architecture. Due to the way this function is used, we do not believe this leakage is enough to allow recovery of the private key when P-256 is used in any well known protocols.

CVSS3: 4
EPSS: Низкий
debian логотип

CVE-2025-22866

6 месяцев назад

Due to the usage of a variable time instruction in the assembly implem ...

CVSS3: 4
EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:0285-1

6 месяцев назад

Security update for go1.24

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:0393-1

6 месяцев назад

Security update for go1.23

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:0392-1

6 месяцев назад

Security update for go1.22

EPSS: Низкий
redos логотип

ROS-20250226-17

5 месяцев назад

Уязвимость golang

CVSS2: 2.1
EPSS: Низкий
github логотип

GHSA-3whm-j4xm-rv8x

6 месяцев назад

Due to the usage of a variable time instruction in the assembly implementation of an internal function, a small number of bits of secret scalars are leaked on the ppc64le architecture. Due to the way this function is used, we do not believe this leakage is enough to allow recovery of the private key when P-256 is used in any well known protocols.

CVSS3: 8.4
EPSS: Низкий
fstec логотип

BDU:2025-03456

6 месяцев назад

Уязвимость компонента crypto-elliptic языка программирования Golang, позволяющая нарушителю получить доступ к конфиденциальной информации

CVSS3: 4
EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:0431-1

6 месяцев назад

Security update for go1.24

EPSS: Низкий
ubuntu логотип

CVE-2024-45341

6 месяцев назад

A certificate with a URI which has a IPv6 address with a zone ID may incorrectly satisfy a URI name constraint that applies to the certificate chain. Certificates containing URIs are not permitted in the web PKI, so this only affects users of private PKIs which make use of URIs.

CVSS3: 6.1
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
suse-cvrf логотип
SUSE-SU-2025:1555-1

Security update for go1.22-openssl

3 месяца назад
oracle-oval логотип
ELSA-2025-7466

ELSA-2025-7466: delve and golang security update (MODERATE)

около 1 месяца назад
suse-cvrf логотип
SUSE-SU-2025:01731-1

Security update for go1.23-openssl

2 месяца назад
suse-cvrf логотип
SUSE-SU-2025:0281-1

Security update for go1.22

6 месяцев назад
suse-cvrf логотип
SUSE-SU-2025:0280-1

Security update for go1.23

6 месяцев назад
redos логотип
ROS-20250212-16

Множественные уязвимости golang

CVSS3: 6.1
6 месяцев назад
oracle-oval логотип
ELSA-2025-3772

ELSA-2025-3772: go-toolset:ol8 security update (MODERATE)

4 месяца назад
suse-cvrf логотип
SUSE-SU-2025:0429-1

Security update for govulncheck-vulndb

6 месяцев назад
ubuntu логотип
CVE-2025-22866

Due to the usage of a variable time instruction in the assembly implementation of an internal function, a small number of bits of secret scalars are leaked on the ppc64le architecture. Due to the way this function is used, we do not believe this leakage is enough to allow recovery of the private key when P-256 is used in any well known protocols.

CVSS3: 4
0%
Низкий
6 месяцев назад
redhat логотип
CVE-2025-22866

Due to the usage of a variable time instruction in the assembly implementation of an internal function, a small number of bits of secret scalars are leaked on the ppc64le architecture. Due to the way this function is used, we do not believe this leakage is enough to allow recovery of the private key when P-256 is used in any well known protocols.

CVSS3: 5.3
0%
Низкий
6 месяцев назад
nvd логотип
CVE-2025-22866

Due to the usage of a variable time instruction in the assembly implementation of an internal function, a small number of bits of secret scalars are leaked on the ppc64le architecture. Due to the way this function is used, we do not believe this leakage is enough to allow recovery of the private key when P-256 is used in any well known protocols.

CVSS3: 4
0%
Низкий
6 месяцев назад
debian логотип
CVE-2025-22866

Due to the usage of a variable time instruction in the assembly implem ...

CVSS3: 4
0%
Низкий
6 месяцев назад
suse-cvrf логотип
SUSE-SU-2025:0285-1

Security update for go1.24

6 месяцев назад
suse-cvrf логотип
SUSE-SU-2025:0393-1

Security update for go1.23

0%
Низкий
6 месяцев назад
suse-cvrf логотип
SUSE-SU-2025:0392-1

Security update for go1.22

0%
Низкий
6 месяцев назад
redos логотип
ROS-20250226-17

Уязвимость golang

CVSS2: 2.1
0%
Низкий
5 месяцев назад
github логотип
GHSA-3whm-j4xm-rv8x

Due to the usage of a variable time instruction in the assembly implementation of an internal function, a small number of bits of secret scalars are leaked on the ppc64le architecture. Due to the way this function is used, we do not believe this leakage is enough to allow recovery of the private key when P-256 is used in any well known protocols.

CVSS3: 8.4
0%
Низкий
6 месяцев назад
fstec логотип
BDU:2025-03456

Уязвимость компонента crypto-elliptic языка программирования Golang, позволяющая нарушителю получить доступ к конфиденциальной информации

CVSS3: 4
0%
Низкий
6 месяцев назад
suse-cvrf логотип
SUSE-SU-2025:0431-1

Security update for go1.24

6 месяцев назад
ubuntu логотип
CVE-2024-45341

A certificate with a URI which has a IPv6 address with a zone ID may incorrectly satisfy a URI name constraint that applies to the certificate chain. Certificates containing URIs are not permitted in the web PKI, so this only affects users of private PKIs which make use of URIs.

CVSS3: 6.1
0%
Низкий
6 месяцев назад

Уязвимостей на страницу