crates.io/sodiumoxide CVE-2017-1000168: medium 6.5, EPSS 1.25%

scalarmult() vulnerable to degenerate public keys

Action: Upgrade sodiumoxide to 0.0.14 or later.

cargo update -p sodiumoxide --precise 0.0.14

Affected

Fixed versions

Sources

• osv: GHSA-2wc6-2rcj-8v76
• https://nvd.nist.gov/vuln/detail/CVE-2017-1000168
• https://github.com/dnaq/sodiumoxide/issues/154
• https://github.com/sodiumoxide/sodiumoxide/commit/24c7a5550807ac8a09648b5878f19d14c3a69135
• https://github.com/sodiumoxide/sodiumoxide
• https://rustsec.org/advisories/RUSTSEC-2017-0001.html

CVE-2017-1000168 · published 2021-08-25T21:00:41Z · modified 2023-11-08T03:58:43.680103Z · JSON