CVE-2016-7544

概要

参考情報

• openwall.com/lists/oss-security/2016/09/23/5 · Mailing List
• openwall.com/lists/oss-security/2016/09/23/9 · Mailing List
• securityfocus.com/bid/93164 · Third Party Advisory
• weidai11/cryptopp · Issue Tracking
• cryptopp.com/release565.html · Release Notes

crypto++ のその他の脆弱性

• CVE-2023-50981高 7.5ModularSquareRoot in Crypto++ (aka cryptopp) through 8.9.0 allows attackers to cause a denial of service (infinite loop) via crafted DER pub…
• CVE-2023-50980高 7.5gf2n.cpp in Crypto++ (aka cryptopp) through 8.9.0 allows attackers to cause a denial of service (application crash) via DER public-key data …
• CVE-2023-50979中 5.9Crypto++ (aka cryptopp) through 8.9.0 has a Marvin side channel during decryption with PKCS#1 v1.5 padding.
• CVE-2022-48570高 7.5Crypto++ through 8.4 contains a timing side channel in ECDSA signature generation. Function FixedSizeAllocatorWithCleanup could write to mem…
• CVE-2021-43398中 5.3Crypto++ (aka Cryptopp) 8.6.0 and earlier contains a timing leakage in MakePublicKey(). There is a clear correlation between execution time …