Lucene search
SnykCVELIST:CVE-2019-10764HistoryNov 18, 2019 - 9:55 p.m.
CVE-2019-10764
2019-11-1821:55:34
snyk
www.cve.org
0.002 Low
EPSS
Percentile
62.2%
In elliptic-php versions priot to 1.0.6, Timing attacks might be possible which can result in practical recovery of the long-term private key generated by the library under certain conditions. Leakage of a bit-length of the scalar during scalar multiplication is possible on an elliptic curve which might allow practical recovery of the long-term private key.
CNA Affected
[
{
"product": "simplito/elliptic-php",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "All versions prior to version 2.5"
}
]
}
]Related
prion
prion
Design/Logic Flaw
2019-11-18 22:15:00
osv
osv
CVE-2019-10764
2019-11-18 22:15:11
Timing attacks might allow practical recovery of the long-term private key
2019-11-20 01:34:50
nvd
nvd
CVE-2019-10764
2019-11-18 22:15:11
cve
cve
CVE-2019-10764
2019-11-18 22:15:11
veracode
veracode
Timing Attack
2019-11-19 01:20:26
github
github
Timing attacks might allow practical recovery of the long-term private key
2019-11-20 01:34:50