Lucene search
K

5 matches found

Snyk
Snyk
added 2025/02/21 10:43 p.m.3 views

Incorrect Calculation

Overview vyper is a Pythonic Smart Contract Language for the EVM. Affected versions of this package are vulnerable to Incorrect Calculation due to the sqrt function. An attacker can manipulate the output to cause incorrect rounding results by providing specific input values that cause the functio...

7.5CVSS6.9AI score0.00295EPSS
Exploits0References2
OSV
OSV
added 2025/02/21 10:15 p.m.1 views

PYSEC-2025-29

vyper is a Pythonic Smart Contract Language for the EVM. Vyper sqrt builtin uses the babylonian method to calculate square roots of decimals. Unfortunately, improper handling of the oscillating final states may lead to sqrt incorrectly returning rounded up results. This issue is being addressed a...

7.5CVSS5.9AI score0.00295EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2023/02/15 3:34 a.m.2 views

SUSE CVE-2022-0778

The BNmodsqrt function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a...

7.5CVSS6.1AI score0.70561EPSS
Exploits2References44
Broadcom
Broadcom
added 2022/09/27 12:0 a.m.9 views

CVE-2022-0778 - Infinite loop in BN_mod_sqrt() reachable when parsing certificates

Security Advisory ID: BSA-2022-1752 Component: OpenSSL Revision: 2.0 The BNmodsqrt function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. More information is at https://www.openssl.org/news/secadv/20220315.txt Affected Products Broca...

7.5CVSS6.6AI score0.70561EPSS
Exploits2
OSV
OSV
added 2022/03/17 9:0 p.m.2 views

CLSA-2022-1647550812 Fix of CVE: CVE-2022-0778

CVE-2022-0778: Fix possible infinite loop in BNmodsqrt...

7.5CVSS6.9AI score0.70561EPSS
Exploits2References1
Rows per page
Query Builder