CVE-2023-50979

5.9

MEDIUMCVSS v3

Published

December 18, 2023

Affected

8 projects

Assigned by

MITRE

Severity scale

010

Description

Crypto++ (aka cryptopp) through 8.9.0 has a Marvin side channel during decryption with PKCS#1 v1.5 padding.

NPMThis package is no longer supported and has been deprecated. To avoid malicious use, npm is hanging on to the package name.

<= 8.9.0NVD

GitHubfree C++ class library of cryptographic schemes

NVD

GitHub

[mirror] Go supplementary cryptography libraries

<= 8.9.0NVD

Crates.ioFacade crate for all of the RustCrypto traits (e.g. `aead`, `cipher`, `digest`)

<= 8.9.0NVD

NuGet GalleryCryptoAPI library for using PEM key format in .Net apps. Based on Christian Etter's CryptoAPI wrapper.

<= 8.9.0NVD

Python Package IndexSimple symmetric GPG file encryption and decryption

<= 8.9.0NVD

RubyGemsdescription of gem

<= 8.9.0NVD

GitHubSimple symmetric GPG file encryption and decryption

<= 8.9.0NVD