Vendors / Cryptlib Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 0 CVSS 7.0–8.9
Exploited now Cryptlib records in CISA KEV No Cryptlib vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 26
A security vulnerability has been identified in the cryptlib cryptographic library when cryptlib is compiled with the support for RSA key exchange ciphersuites in TLS (by setting the USE_RSA_SUITES define), it will be vu…
CVSS 3.1 MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.00309 · Published 2024-02-05 · No fix listed CWE-208
Priority LOW 22
cryptlib through 3.4.4 allows a memory-cache side-channel attack on DSA and ECDSA signatures, aka the Return Of the Hidden Number Problem or ROHNP.
CVSS 3.1 MEDIUM 4.9· Physical · No auth · No interaction · EPSS 0.00341 · Published 2018-06-15 · No fix listed CWE-200
Open these records in search → All records by CVSS severity
Critical0 High0 Medium2 Low0 No CVSS0