Поиск уязвимостей
Количество 24
Количество 24
CVE-2025-22866
Due to the usage of a variable time instruction in the assembly implementation of an internal function, a small number of bits of secret scalars are leaked on the ppc64le architecture. Due to the way this function is used, we do not believe this leakage is enough to allow recovery of the private key when P-256 is used in any well known protocols.
CVE-2025-22866
Due to the usage of a variable time instruction in the assembly implementation of an internal function, a small number of bits of secret scalars are leaked on the ppc64le architecture. Due to the way this function is used, we do not believe this leakage is enough to allow recovery of the private key when P-256 is used in any well known protocols.
CVE-2025-22866
Due to the usage of a variable time instruction in the assembly implementation of an internal function, a small number of bits of secret scalars are leaked on the ppc64le architecture. Due to the way this function is used, we do not believe this leakage is enough to allow recovery of the private key when P-256 is used in any well known protocols.
CVE-2025-22866
Timing sidechannel for P-256 on ppc64le in crypto/internal/nistec
CVE-2025-22866
Due to the usage of a variable time instruction in the assembly implem ...
SUSE-SU-2025:0393-1
Security update for go1.23
SUSE-SU-2025:0392-1
Security update for go1.22
GHSA-3whm-j4xm-rv8x
Due to the usage of a variable time instruction in the assembly implementation of an internal function, a small number of bits of secret scalars are leaked on the ppc64le architecture. Due to the way this function is used, we do not believe this leakage is enough to allow recovery of the private key when P-256 is used in any well known protocols.
BDU:2025-03456
Уязвимость компонента crypto-elliptic языка программирования Golang, позволяющая нарушителю получить доступ к конфиденциальной информации
SUSE-SU-2025:0431-1
Security update for go1.24
ROS-20250226-17
Уязвимость golang
SUSE-SU-2025:1555-1
Security update for go1.22-openssl
RLSA-2025:7466
Moderate: delve and golang security update
ELSA-2025-7466
ELSA-2025-7466: delve and golang security update (MODERATE)
RLSA-2025:3773
Important: delve and golang security update
ALT-PU-2025-3927
ALT-PU-2025-3927: package `golang` update to version 1.23.7-alt1
ALT-PU-2025-3850
ALT-PU-2025-3850: package `golang` update to version 1.23.7-alt1
SUSE-SU-2025:01731-1
Security update for go1.23-openssl
RLSA-2026:67148
Important: osbuild-composer security update
ELSA-2026-67148-0
ELSA-2026-67148-0: osbuild-composer security update (IMPORTANT)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2025-22866 Due to the usage of a variable time instruction in the assembly implementation of an internal function, a small number of bits of secret scalars are leaked on the ppc64le architecture. Due to the way this function is used, we do not believe this leakage is enough to allow recovery of the private key when P-256 is used in any well known protocols. | CVSS3: 4 | 0% Низкий | почти 2 года назад |
 | CVE-2025-22866 Due to the usage of a variable time instruction in the assembly implementation of an internal function, a small number of bits of secret scalars are leaked on the ppc64le architecture. Due to the way this function is used, we do not believe this leakage is enough to allow recovery of the private key when P-256 is used in any well known protocols. | CVSS3: 5.3 | 0% Низкий | почти 2 года назад |
 | CVE-2025-22866 Due to the usage of a variable time instruction in the assembly implementation of an internal function, a small number of bits of secret scalars are leaked on the ppc64le architecture. Due to the way this function is used, we do not believe this leakage is enough to allow recovery of the private key when P-256 is used in any well known protocols. | CVSS3: 4 | 0% Низкий | почти 2 года назад |
 | CVE-2025-22866 Timing sidechannel for P-256 on ppc64le in crypto/internal/nistec | CVSS3: 8.4 | 0% Низкий | около 1 года назад |
| CVE-2025-22866 Due to the usage of a variable time instruction in the assembly implem ... | CVSS3: 4 | 0% Низкий | почти 2 года назад |
 | SUSE-SU-2025:0393-1 Security update for go1.23 | 0% Низкий | больше 1 года назад | |
| SUSE-SU-2025:0392-1 Security update for go1.22 | 0% Низкий | больше 1 года назад | |
| GHSA-3whm-j4xm-rv8x Due to the usage of a variable time instruction in the assembly implementation of an internal function, a small number of bits of secret scalars are leaked on the ppc64le architecture. Due to the way this function is used, we do not believe this leakage is enough to allow recovery of the private key when P-256 is used in any well known protocols. | CVSS3: 8.4 | 0% Низкий | почти 2 года назад |
 | BDU:2025-03456 Уязвимость компонента crypto-elliptic языка программирования Golang, позволяющая нарушителю получить доступ к конфиденциальной информации | CVSS3: 4 | 0% Низкий | почти 2 года назад |
| SUSE-SU-2025:0431-1 Security update for go1.24 | больше 1 года назад | ||
 | ROS-20250226-17 Уязвимость golang | CVSS2: 2.1 | 0% Низкий | больше 1 года назад |
| SUSE-SU-2025:1555-1 Security update for go1.22-openssl | больше 1 года назад | ||
 | RLSA-2025:7466 Moderate: delve and golang security update | около 1 года назад | ||
| ELSA-2025-7466 ELSA-2025-7466: delve and golang security update (MODERATE) | больше 1 года назад | ||
| RLSA-2025:3773 Important: delve and golang security update | больше 1 года назад | ||
| ALT-PU-2025-3927 ALT-PU-2025-3927: package `golang` update to version 1.23.7-alt1 | CVSS3: 4.4 | больше 1 года назад | |
| ALT-PU-2025-3850 ALT-PU-2025-3850: package `golang` update to version 1.23.7-alt1 | CVSS3: 4.4 | больше 1 года назад | |
| SUSE-SU-2025:01731-1 Security update for go1.23-openssl | больше 1 года назад | ||
| RLSA-2026:67148 Important: osbuild-composer security update | около 2 месяцев назад | ||
| ELSA-2026-67148-0 ELSA-2026-67148-0: osbuild-composer security update (IMPORTANT) | около 1 месяца назад |
Уязвимостей на страницу