EUVD-2020-4055

Malware in sbrugna...

nss:mpi-mulmod: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4617917299752960 Project: nss Fuzzing Engine: libFuzzer Fuzz Target: mpi-mulmod Job Type: libfuzzerasannss Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash Revision:...

Vyper Security Vulnerability

Vyper is the Pythonic smart contract language for EVM. A security vulnerability exists in Vyper version 0.3.9 and earlier versions, which stems from the fact that the order in which the parameters of the built-in functions "uint256addmod", "uint256mulmod", "ecadd" and "ecmul" are evaluated does n...

Denial of service in geth

Impact Denial-of-service crash during block processing Details Affected versions suffer from a vulnerability which can be exploited through the MULMOD operation, by specifying a modulo of 0: mulmoda,b,0, causing a panic in the underlying library. The crash was in the uint256 library, where a buff...

GHSA-JM5C-RV3W-W83M Denial of service in geth

Impact Denial-of-service crash during block processing Details Affected versions suffer from a vulnerability which can be exploited through the MULMOD operation, by specifying a modulo of 0: mulmoda,b,0, causing a panic in the underlying library. The crash was in the uint256 library, where a buff...

PT-2020-16370

Name of the Vulnerable Software and Affected Versions Geth versions prior to 1.9.18 Description The issue is a Denial-of-service crash during block processing, which can be exploited through the MULMOD operation by specifying a modulo of 0: mulmoda,b,0, causing a panic in the underlying library...

wolfSSL encryption issue vulnerability (CNVD-2020-22973)

wolfSSL formerly known as CyaSSL is the United States wolfSSL company for embedded systems developers to use a small, portable embedded SSL programming library. A security vulnerability exists in the wceccmulmodex of the ecc.c file in wolfSSL version 4.3.0. An attacker can exploit this...

CVE-2020-11713

wolfSSL 4.3.0 has mulmod code in wceccmulmodex in ecc.c that does not properly resist timing side-channel attacks...

DEBIAN-CVE-2020-11713

wolfSSL 4.3.0 has mulmod code in wceccmulmodex in ecc.c that does not properly resist timing side-channel attacks...

User Enumeration

Overview Affected versions of this package are vulnerable to User Enumeration wolfSSL 4.3.0 has mulmod code in wceccmulmodex in ecc.c that does not properly resist timing side-channel attacks. Remediation Upgrade wolfssl to version 5.0.0 or higher. References - GitHub Gist - GitHub PR...

UBUNTU-CVE-2020-11713

wolfSSL 4.3.0 has mulmod code in wceccmulmodex in ecc.c that does not properly resist timing side-channel attacks...

CVE-2020-11713

CVE-2020-11713 affects wolfSSL 4.3.0, where mulmod code in wc_ecc_mulmod_ex (ecc.c) does not properly resist timing side‑channel attacks. The vulnerability exposes potential leakage of sensitive information due to timing analysis, with the NVD noting a potentially high impact under CVSSv3 (C: HIG...

CVE-2020-11713

wolfSSL 4.3.0 has mulmod code in wceccmulmodex in ecc.c that does not properly resist timing side-channel attacks...

PT-2020-12799

Name of the Vulnerable Software and Affected Versions wolfSSL version 4.3.0 Description The issue is related to the mulmod code in the wc ecc mulmod ex function in ecc.c, which does not properly resist timing side-channel attacks. This could potentially allow an attacker to exploit the timing...

PT-2019-16022

Name of the Vulnerable Software and Affected Versions wolfSSL versions prior to 4.3.0 Description The issue is related to the wc ecc mulmod ex function, which does not properly resist side-channel attacks. Recommendations For versions prior to 4.3.0, update to version 4.3.0 or later to resolve th...