CVE-2016-9939

概要

参考情報

• debian.org/security/2016/dsa-3748 · Third Party Advisory
• openwall.com/lists/oss-security/2016/12/12/7 · Mailing List
• securityfocus.com/bid/94854 · Third Party Advisory
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7IL5A6465IEPW5GAWGXB2ENJPFYVWTJM

crypto++ のその他の脆弱性

• CVE-2023-50981高 7.5ModularSquareRoot in Crypto++ (aka cryptopp) through 8.9.0 allows attackers to cause a denial of service (infinite loop) via crafted DER pub…
• CVE-2023-50980高 7.5gf2n.cpp in Crypto++ (aka cryptopp) through 8.9.0 allows attackers to cause a denial of service (application crash) via DER public-key data …
• CVE-2023-50979中 5.9Crypto++ (aka cryptopp) through 8.9.0 has a Marvin side channel during decryption with PKCS#1 v1.5 padding.
• CVE-2022-48570高 7.5Crypto++ through 8.4 contains a timing side channel in ECDSA signature generation. Function FixedSizeAllocatorWithCleanup could write to mem…
• CVE-2021-43398中 5.3Crypto++ (aka Cryptopp) 8.6.0 and earlier contains a timing leakage in MakePublicKey(). There is a clear correlation between execution time …