CVE-2024-28285

2024-05-1400:00:00

ubuntu.com

fault injection

symmetricdecrypt

cryptopp

crypto++

cve-2024-28285

unix

privilege escalation

7.6 High

AI Score

Confidence

Low

JSON

A Fault Injection vulnerability in the SymmetricDecrypt function in
cryptopp/elgamal.h of Cryptopp Crypto++ 8.9, allows an attacker to
co-reside in the same system with a victim process to disclose information
and escalate privileges.

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchlibcrypto++< anyUNKNOWN
ubuntu20.04noarchlibcrypto++< anyUNKNOWN
ubuntu22.04noarchlibcrypto++< anyUNKNOWN
ubuntu23.10noarchlibcrypto++< anyUNKNOWN
ubuntu24.04noarchlibcrypto++< anyUNKNOWN
ubuntu14.04noarchlibcrypto++< anyUNKNOWN
ubuntu16.04noarchlibcrypto++< anyUNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	18.04	noarch	libcrypto++	< any	UNKNOWN
ubuntu	20.04	noarch	libcrypto++	< any	UNKNOWN
ubuntu	22.04	noarch	libcrypto++	< any	UNKNOWN
ubuntu	23.10	noarch	libcrypto++	< any	UNKNOWN
ubuntu	24.04	noarch	libcrypto++	< any	UNKNOWN
ubuntu	14.04	noarch	libcrypto++	< any	UNKNOWN
ubuntu	16.04	noarch	libcrypto++	< any	UNKNOWN