Lucene search
+L

5 matches found

RedhatCVE
RedhatCVE
•added 2025/05/23 10:21 a.m.•29 views

CVE-2024-33851

phpecc, as used in paragonie/phpecc before 2.0.1, has a branch-based timing leak in Point addition. This is related to phpecc/phpecc on GitHub, and the Matyas Danter ECC library...

4.3CVSS6.7AI score0.00408EPSS
SaveExploits0References1
CVE
CVE
•added 2024/04/27 12:00 a.m.•103 views

CVE-2024-33851

The phpecc library (specifically as used in paragonie/phpecc before 2.0.1 and mdanter/ecc in all versions) contains a branch-based timing leak during Point addition. This flaw allows an attacker to deduce private keys by measuring the time required to perform cryptographic computations. Remediati...

4.3CVSS6.5AI score0.00408EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2024/04/27 12:00 a.m.•39 views

CVE-2024-33851

phpecc, as used in paragonie/phpecc before 2.0.1, has a branch-based timing leak in Point addition. This is related to phpecc/phpecc on GitHub, and the Matyas Danter ECC library...

4.3CVSS6.8AI score
SaveExploits0References3
Cvelist
Cvelist
•added 2024/04/27 12:00 a.m.•77 views

CVE-2024-33851

phpecc, as used in paragonie/phpecc before 2.0.1, has a branch-based timing leak in Point addition. This is related to phpecc/phpecc on GitHub, and the Matyas Danter ECC library...

6.6AI score0.00408EPSS
SaveExploits0References1
Friends Of PHP
Friends Of PHP
•added 2024/04/24 12:02 p.m.•72 views

mdanter/ecc affected by timing vulnerability in cryptographic side-channels

phpecc, as used in all versions of mdanter/ecc, as well as paragonie/ecc before 2.0.1, has a branch-based timing leak in Point addition. This Composer package is also known as phpecc/phpecc on GitHub, previously known as the Matyas Danter ECC library. Paragon Initiative Enterprises hard-forked...

4.3CVSS4.5AI score0.00408EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder