Lucene search
+L

3 matches found

osv_ghsa
osv_ghsa
•added 2024/11/27 7:01 p.m.•23 views

GHSA-J6VM-4R7G-X4GR Devolutions.XTS.NET Vulnerable to Timing Attack on GF Multiplications

Impact Timing attacks on Galois Field multiplications in this package. Successful exploitation would effectively allow a downgrade of the security guarantees of the XTS mode to the security guarantees of ECB mode, allowing block swapping, enabling identification of identical blocks, and rendering...

5.1CVSS5.9AI score0.00141EPSS
SaveExploits0References4
Snyk
Snyk
•added 2024/11/27 7:01 p.m.•12 views

Covert Timing Channel

Overview Affected versions of this package are vulnerable to Covert Timing Channel via the Galois Field multiplications process. An attacker can effectively downgrade the security guarantees of the XTS mode to those of ECB mode, enabling block swapping and identification of identical blocks,...

5.1CVSS5.7AI score0.00141EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2024/11/27 7:01 p.m.•28 views

Devolutions.XTS.NET Vulnerable to Timing Attack on GF Multiplications

Impact Timing attacks on Galois Field multiplications in this package. Successful exploitation would effectively allow a downgrade of the security guarantees of the XTS mode to the security guarantees of ECB mode, allowing block swapping, enabling identification of identical blocks, and rendering...

5.1CVSS5.9AI score0.00141EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder