Lucene search
HistoryJan 20, 2023 - 9:15 p.m.
CVE-2023-24025
post-quantum cryptography
crystals-dilithium
vulnerability
digital signature
template attack
data leakage
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
42.6%
CRYSTALS-DILITHIUM (in Post-Quantum Cryptography Selected Algorithms 2022) in PQClean d03da30 may allow universal forgeries of digital signatures via a template side-channel attack because of intermediate data leakage of one vector.
Affected configurations
Node
pqclean_projectpqcleanMatch-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| pqclean_project | pqclean | - | cpe:2.3:a:pqclean_project:pqclean:-:*:*:*:*:*:*:* |
Related
cve
cve
CVE-2023-24025
2023-01-20 21:15:11
prion
prion
Design/Logic Flaw
2023-01-20 21:15:00
cvelist
cvelist
CVE-2023-24025
2023-01-20 00:00:00
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
42.6%
Related for NVD:CVE-2023-24025