Lucene search
K

8 matches found

AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.1 views

Astra Linux - уязвимость в libsodium

libsodium before ad3004e, in atypical use cases involving certain custom cryptography or untrusted data to cryptocoreed25519isvalidpoint, mishandles checks for whether an elliptic curve point is valid because it sometimes allows points that aren't in the main cryptographic group...

4.5CVSS6AI score0.00005EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2026/03/16 12:0 a.m.2 views

EulerOS 2.0 SP12 : libsodium (EulerOS-SA-2026-1370)

According to the versions of the libsodium package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libsodium before ad3004e, in atypical use cases involving certain custom cryptography or untrusted data to cryptocoreed25519isvalidpoint,...

4.5CVSS5.9AI score0.00005EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2026/03/10 12:0 a.m.1 views

EulerOS 2.0 SP13 : libsodium (EulerOS-SA-2026-1284)

According to the versions of the libsodium package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libsodium before ad3004e, in atypical use cases involving certain custom cryptography or untrusted data to cryptocoreed25519isvalidpoint,...

4.5CVSS5.9AI score0.00005EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2026/03/10 12:0 a.m.2 views

EulerOS 2.0 SP13 : libsodium (EulerOS-SA-2026-1248)

According to the versions of the libsodium package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libsodium before ad3004e, in atypical use cases involving certain custom cryptography or untrusted data to cryptocoreed25519isvalidpoint,...

4.5CVSS5.9AI score0.00005EPSS
Exploits0References2
Github Security Blog
Github Security Blog
added 2025/12/31 6:30 a.m.4 views

libsodium has Incomplete List of Disallowed Inputs

libsodium before ad3004e, in atypical use cases involving certain custom cryptography or untrusted data to cryptocoreed25519isvalidpoint, mishandles checks for whether an elliptic curve point is valid because it sometimes allows points that aren't in the main cryptographic group. This advisoory...

4.5CVSS6.5AI score0.00005EPSS
Exploits0References14Affected Software3
OSV
OSV
added 2025/12/31 6:15 a.m.0 views

ALPINE-CVE-2025-69277

libsodium before ad3004e, in atypical use cases involving certain custom cryptography or untrusted data to cryptocoreed25519isvalidpoint, mishandles checks for whether an elliptic curve point is valid because it sometimes allows points that aren't in the main cryptographic group...

4.5CVSS6.8AI score0.00005EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/12/31 12:0 a.m.2 views

libsodium 安全漏洞

libsodium is a cryptographic software library from the individual developer Frank Denis. A security vulnerability exists in previous versions of libsodium ad3004e, which stems from mishandling of elliptic curve point validity checking, which may allow points that are not part of the main crypto...

4.5CVSS6.4AI score0.00005EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2025/01/01 12:0 a.m.2 views

PT-2025-54285

Name of the Vulnerable Software and Affected Versions libsodium versions prior to ad3004e Description The software mishandles checks for the validity of elliptic curve points in specific, unusual scenarios. This occurs when custom cryptography or untrusted data is used with the crypto core ed2551...

4.5CVSS6.5AI score0.00005EPSS
Exploits0References80
Rows per page
Query Builder