CVE-2024-33780

The MP-SPDZ version v0.3.8 software contains a segmentation violation vulnerability within the osuCrypto::copyOut function located at /Tools/SilentPprf.cpp. An attacker can exploit this flaw by sending a crafted message to trigger a Denial of Service (DoS) . As a temporary workaround, it is recom...

CVE-2024-33781

MP-SPDZ version v0.3.8 is vulnerable to a stack overflow within the octetStream::get_bytes function located in /Tools/octetStream.cpp. An attacker can exploit this vulnerability by sending a crafted message to cause a Denial of Service (DoS) . As a temporary workaround, users are advised to disab...

CVE-2024-33782

The MP-SPDZ open-source framework for benchmarking Secure Multiparty Computing (MPC) protocols version v0.3.8 is susceptible to a stack-based buffer overflow . The flaw exists in the OTExtensionWithMatrix::extend function located in /OT/OTExtensionWithMatrix.cpp. An attacker can exploit this vuln...

CVE-2024-33783

The MP-SPDZ v0.3.8 software contains a segmentation violation in the osuCrypto::SilentMultiPprfReceiver::expand function located in /Tools/SilentPprf.cpp. An attacker can exploit this vulnerability by sending a crafted message to cause a Denial of Service (DoS) . As a temporary workaround, it is ...