Incorrect Default Permissions in Binance tss-lib

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2020-12118 · ADVISORY
• binance-chain/tss-lib#89 · WEB
• binance-chain/tss-lib#89 · WEB
• binance-chain/tss-lib release v1.2.0 · WEB
• GitHub Advisory GHSA-399h-cmvp-qgx5 · ADVISORY

Lỗ hổng khác của github.com/binance-chain/tss-lib

• CVE-2023-26557CAO 7.5io.finnet tss-lib before 2.0.0 can leak the lambda value of a private key via a timing side-channel attack because it relies on Go big.Int, …
• CVE-2023-26556NGHIÊM TRỌNG 9.1io.finnet tss-lib before 2.0.0 can leak a secret key via a timing side-channel attack because it relies on the scalar-multiplication impleme…
• CVE-2022-47930TRUNG BÌNH 6.8An issue was discovered in IO FinNet tss-lib before 2.0.0. The parameter ssid for defining a session id is not used through the MPC implemen…
• CVE-2022-47931NGHIÊM TRỌNG 9.1IO FinNet tss-lib before 2.0.0 allows a collision of hash values.