1 matches found
Updated libcryptopp packages fix security vulnerability
The updated packages fix a security vulnerability: Crypto++ 8.3.0 and earlier contains a timing side channel in ECDSA signature generation. This allows a local or remote attacker, able to measure the duration of hundreds to thousands of signing operations, to compute the private key used. The iss...
5.9CVSS0.9AI score0.03245EPSS
SaveExploits1References2
20