CVE-2024-11862
Description
Non constant time cryptographic operation in Devolutions.XTS.NET 2024.11.19 and earlier allows an attacker to render half of the encryption key obsolete via a timing attacks
Weakness Type (CWE)
References
Frequently Asked Questions
What is CVE-2024-11862? +
How do I check if I'm vulnerable to CVE-2024-11862? +
Related Vulnerabilities
Post-Quantum Secure Feldman's Verifiable Secret Sharing provides a Python implementation of Feldman's Verifiable Secret Sharing (VSS) scheme. In versions 0.8.0b2 …
SCRAM (Salted Challenge Response Authentication Mechanism) is part of the family of Simple Authentication and Security Layer (SASL, RFC 4422) …
File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, …
vLLM is an inference and serving engine for large language models (LLMs). Before version 0.11.0rc2, the API key support in …
A vulnerability was found in Ruby. The Ruby interpreter is vulnerable to the Marvin Attack. This attack allows the attacker …
The `ecdsa` PyPI package is a pure Python implementation of ECC (Elliptic Curve Cryptography) with support for ECDSA (Elliptic Curve …