7 matches found
EUVD-2024-45837
Malicious code in bioql PyPI...
UBUNTU-CVE-2023-30590
The generateKeys API function returned from crypto.createDiffieHellman only generates missing or outdated keys, that is, it only generates a private key if none has been set yet, but the function is also needed to compute the corresponding public key after calling setPrivateKey. However, the...
MatrixSSL < 4.2.2 Private Key Computation Vulnerability
MatrixSSL is prone to a private key computation vulnerability. This VT has been deprecated and merged into the VT SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Eclipse TinyDTLS encryption issue vulnerability
Eclipse TinyDTLS is a library for Datagram Transport Layer Security DTLS.Eclipse TinyDTLS is vulnerable to an encryption issue that could be exploited by an attacker to compute a key to decrypt DTLS communications...
PT-2020-6333
Name of the Vulnerable Software and Affected Versions Eclipse TinyDTLS versions through 0.9-rc1 Description The issue is related to errors in the pseudorandom number generator code. This makes it easier for remote attackers to compute the master key and then decrypt DTLS traffic, potentially...
CVE-2019-13629
MatrixSSL 4.2.1 and earlier contains a timing side channel in ECDSA signature generation. This allows a local or a remote attacker, able to measure the duration of hundreds to thousands of signing operations, to compute the private key used. The issue occurs because crypto/pubkey/eccmath.c scalar...
