CVE-2017-1000168

sodiumoxide 0.0.13 and older scalarmult vulnerable to degenerate public keys...

b2b (0.1.0), crust (>=0.0.7, <=0.0.65) +16 more potentially affected by CVE-2017-1000168 via sodiumoxide (>=0.0.4, <=0.0.13)

sodiumoxide CARGO version =0.0.4, =0.0.7, =0.5.0, =2.0.1, =0.1.0, =0.1.0, =0.1.0, =1.0.0, =0.1.0, =0.1.0, =0.0.1, =0.0.1, =0.1.4, =0.5.1, =0.0.1, =0.1.0 and more Source cves: CVE-2017-1000168 Source advisory: OSV:GHSA-2WC6-2RCJ-8V76...

CVE-2017-1000168

sodiumoxide 0.0.13 and older scalarmult vulnerable to degenerate public keys...

CVE-2017-1000168

The CVE-2017-1000168 entry concerns sodiumoxide prior to a fixed release where the scalarmult() function refused all-zero public keys, preventing the derived Diffie-Hellman shared secret from always being zero. The root cause, as documented in multiple sources (e.g., rustsec and GHSA advisories),...

CVE-2017-1000168

sodiumoxide 0.0.13 and older scalarmult vulnerable to degenerate public keys...

b2b (0.1.0), crust (>=0.0.7, <=0.0.65) +16 more potentially affected by CVE-2017-1000168 via sodiumoxide (>=0.0.4, <=0.0.13)

sodiumoxide CARGO version =0.0.4, =0.0.7, =0.5.0, =2.0.1, =0.1.0, =0.1.0, =0.1.0, =1.0.0, =0.1.0, =0.1.0, =0.0.1, =0.0.1, =0.1.4, =0.5.1, =0.0.1, =0.1.0 and more Source cves: CVE-2017-1000168 Source advisory: OSV:RUSTSEC-2017-0001...