CVE-2023-50981

概要

参考情報

• weidai11/cryptopp · Exploit

crypto++ のその他の脆弱性

• CVE-2023-50980高 7.5gf2n.cpp in Crypto++ (aka cryptopp) through 8.9.0 allows attackers to cause a denial of service (application crash) via DER public-key data …
• CVE-2023-50979中 5.9Crypto++ (aka cryptopp) through 8.9.0 has a Marvin side channel during decryption with PKCS#1 v1.5 padding.
• CVE-2022-48570高 7.5Crypto++ through 8.4 contains a timing side channel in ECDSA signature generation. Function FixedSizeAllocatorWithCleanup could write to mem…
• CVE-2021-43398中 5.3Crypto++ (aka Cryptopp) 8.6.0 and earlier contains a timing leakage in MakePublicKey(). There is a clear correlation between execution time …
• CVE-2021-40530中 5.9The ElGamal implementation in Crypto++ through 8.5 allows plaintext recovery because, during interaction between two cryptographic libraries…