Lucene search
HistoryMay 14, 2024 - 3:14 p.m.
CVE-2024-28285
fault injection
symmetricdecrypt
cryptopp
elgamal.h
cve-2024-28285
information disclosure
privilege escalation
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
6.7
Confidence
Low
A Fault Injection vulnerability in the SymmetricDecrypt function in cryptopp/elgamal.h of Cryptopp Crypto++ 8.9, allows an attacker to co-reside in the same system with a victim process to disclose information and escalate privileges.
Related
debiancve
debiancve
CVE-2024-28285
2024-05-14 15:14:19
ubuntucve
ubuntucve
CVE-2024-28285
2024-05-14 00:00:00
osv
osv
CVE-2024-28285
2024-05-14 15:14:00
vulnrichment
vulnrichment
CVE-2024-28285
1976-01-01 00:00:00
cve
cve
CVE-2024-28285
2024-05-14 15:14:19
cvelist
cvelist
CVE-2024-28285
1976-01-01 00:00:00
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
6.7
Confidence
Low
Related for NVD:CVE-2024-28285