Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8
CVE-2024-25714
- EPSS 0.16%
- Published 11.02.2024 03:15:09
- Last modified 21.11.2024 09:01:15
In Rhonabwy through 1.1.13, HMAC signature verification uses a strcmp function that is vulnerable to side-channel attacks, because it stops the comparison when the first difference is spotted in the two signatures. (The fix uses gnutls_memcmp, which ...
7.5
CVE-2022-38493
- EPSS 0.08%
- Published 20.08.2022 20:15:08
- Last modified 21.11.2024 07:16:35
Rhonabwy 0.9.99 through 1.1.x before 1.1.7 doesn't check the RSA private key length before RSA-OAEP decryption. This allows attackers to cause a Denial of Service via a crafted JWE (JSON Web Encryption) token.
7.5
CVE-2022-32096
- EPSS 0.54%
- Published 13.07.2022 16:15:08
- Last modified 21.11.2024 07:05:46
Rhonabwy before v1.1.5 was discovered to contain a buffer overflow via the component r_jwe_aesgcm_key_unwrap. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted JWE token.
1