Lucene search
K

6 matches found

Github Security Blog
Github Security Blog
added 2023/01/07 9:30 a.m.14 views

easy-scrypt Observable Timing Discrepancy vulnerability

A vulnerability, which was classified as problematic, was found in agnivade easy-scrypt. Affected is the function VerifyPassphrase of the file scrypt.go. The manipulation leads to observable timing discrepancy. Upgrading to version 1.0.0 can address this issue. The name of the patch is...

5.3CVSS5.7AI score0.00335EPSS
Exploits0References6Affected Software1
OSV
OSV
added 2023/01/07 9:30 a.m.11 views

GHSA-R894-5R7V-7RX3 easy-scrypt Observable Timing Discrepancy vulnerability

A vulnerability, which was classified as problematic, was found in agnivade easy-scrypt. Affected is the function VerifyPassphrase of the file scrypt.go. The manipulation leads to observable timing discrepancy. Upgrading to version 1.0.0 can address this issue. The name of the patch is...

5.3CVSS5.2AI score0.00335EPSS
Exploits0References6
NVD
NVD
added 2023/01/07 9:15 a.m.10 views

CVE-2014-125055

A vulnerability, which was classified as problematic, was found in agnivade easy-scrypt. Affected is the function VerifyPassphrase of the file scrypt.go. The manipulation leads to observable timing discrepancy. The complexity of an attack is rather high. The exploitability is told to be difficult...

5.3CVSS4.2AI score0.00335EPSS
Exploits0References4
Prion
Prion
added 2023/01/07 9:15 a.m.11 views

Design/Logic Flaw

A vulnerability, which was classified as problematic, was found in agnivade easy-scrypt. Affected is the function VerifyPassphrase of the file scrypt.go. The manipulation leads to observable timing discrepancy. The complexity of an attack is rather high. The exploitability is told to be difficult...

1.4CVSS7AI score0.00335EPSS
Exploits0References4Affected Software1
CVE
CVE
added 2023/01/07 8:59 a.m.63 views

CVE-2014-125055

The CVE concerns the Go library agnivade/easy-scrypt. Affected is the VerifyPassphrase function in scrypt.go, where an observable timing discrepancy is introduced due to the underlying implementation flaw. Per multiple sources, upgrading to version 1.0.0 fixes the issue (patch: 477c10cf3b144ddf96...

5.3CVSS4.5AI score0.00335EPSS
Exploits0References4Affected Software1
Cvelist
Cvelist
added 2023/01/07 8:59 a.m.9 views

CVE-2014-125055 agnivade easy-scrypt scrypt.go VerifyPassphrase timing discrepancy

A vulnerability, which was classified as problematic, was found in agnivade easy-scrypt. Affected is the function VerifyPassphrase of the file scrypt.go. The manipulation leads to observable timing discrepancy. The complexity of an attack is rather high. The exploitability is told to be difficult...

2.6CVSS5.3AI score0.00335EPSS
Exploits0References4
Rows per page
Query Builder