Read the docs

Iofinnet

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Iofinnet records in CISA KEV

No Iofinnet vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Tss-lib 4 records MEDIUM

Records

4 records in Tss-lib · all components

TI-2023-11693 CVE-2023-26556 · GHSA-3w84-4mjc-rjw7

io.finnet tss-lib before 2.0.0 can leak a secret key via a timing side-channel attack…

Priority MEDIUM 49

io.finnet tss-lib before 2.0.0 can leak a secret key via a timing side-channel attack because it relies on the scalar-multiplication implementation in Go crypto/elliptic, which is not constant time (there is an if statem…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00864 Published 2023-04-21 Fixed in 2.0.0 CWE-203
TI-2023-11694 CVE-2023-26557 · GHSA-mjqv-xhgm-gx8c

io.finnet tss-lib before 2.0.0 can leak the lambda value of a private key via a timing…

Priority LOW 34

io.finnet tss-lib before 2.0.0 can leak the lambda value of a private key via a timing side-channel attack because it relies on Go big.Int, which is not constant time for Cmp, modular exponentiation, or modular inverse.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00864 Published 2023-04-21 Fixed in 1.3.6-0.20230324145555-bb6fb30bd3eb CWE-203
Open these records in search →