Lucene search
PRIOn knowledge basePRION:CVE-2022-45195HistoryNov 12, 2022 - 7:15 p.m.
Design/Logic Flaw
2022-11-1219:15:00
PRIOn knowledge base
www.prio-n.com
4
simplexmq
simplex chat
key derivation
forward secrecy
compromise
private key
x3dh
double ratchet protocol
security
SimpleXMQ before 3.4.0, as used in SimpleX Chat before 4.2, does not apply a key derivation function to intended data, which can interfere with forward secrecy and can have other impacts if there is a compromise of a single private key. This occurs in the X3DH key exchange for the double ratchet protocol.
| CPE | Name | Operator | Version |
|---|---|---|---|
| simplex_chat | lt | 4.2 | |
| simplexmq | lt | 3.4.0 |
Related
cve
cve
CVE-2022-45195
2022-11-12 19:15:10
osv
osv
CVE-2022-45195
2022-11-12 19:15:10
cvelist
cvelist
CVE-2022-45195
2022-11-12 00:00:00
nvd
nvd
CVE-2022-45195
2022-11-12 19:15:10