Lucene search

K
osvGoogleOSV:GO-2023-1733
HistoryJul 11, 2023 - 6:44 p.m.

Timing attack from non-constant time scalar arithmetic in github.com/bnb-chain/tss-lib

2023-07-1118:44:28
Google
osv.dev
7
timing attack
non-constant time
scalar arithmetic
github
bnb-chain
tss-lib
software

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

0.001 Low

EPSS

Percentile

46.1%

Timing attack from non-constant time scalar arithmetic in github.com/bnb-chain/tss-lib.

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

0.001 Low

EPSS

Percentile

46.1%

Related for OSV:GO-2023-1733