Lucene search
Alpine Linux Development TeamALPINE:CVE-2019-25003HistoryDec 31, 2020 - 10:15 a.m.
CVE-2019-25003
2020-12-3110:15:00
Alpine Linux Development Team
security.alpinelinux.org
13
0.002 Low
EPSS
Percentile
53.8%
An issue was discovered in the libsecp256k1 crate before 0.3.1 for Rust. Scalar::check_overflow allows a timing side-channel attack; consequently, attackers can obtain sensitive information.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Alpine | 3.14-community | noarch | libsecp256k1 | = 0_git20201009-r1 | UNKNOWN |
| Alpine | edge-community | noarch | libsecp256k1 | = 0_git20211025-r1 | UNKNOWN |
| Alpine | 3.15-community | noarch | libsecp256k1 | = 0_git20211025-r1 | UNKNOWN |
Related
rustsec
rustsec
Flaw in Scalar::check_overflow allows side-channel timing attack
2019-10-14 12:00:00
github
github
libsecp256k1 contains side-channel timing attack
2021-08-25 20:46:46
osv
osv
libsecp256k1 contains side-channel timing attack
2021-08-25 20:46:46
Flaw in Scalar::check_overflow allows side-channel timing attack
2019-10-14 12:00:00
CVE-2019-25003
2020-12-31 10:15:14
cve
cve
CVE-2019-25003
2020-12-31 10:15:14
nvd
nvd
CVE-2019-25003
2020-12-31 10:15:14
prion
prion
Information disclosure
2020-12-31 10:15:00
cvelist
cvelist
CVE-2019-25003
2020-12-31 08:32:57