Debian/golang-github-aws-aws-sdk-go: medium 4.3
The AWS S3 Crypto SDK sends an unencrypted hash of the plaintext alongside the ciphertext as a metadata field. This hash can be used to brute force the plaintext, if the hash is readable to the attack
Action: Upgrade golang-github-aws-aws-sdk-go to 1.34.22-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.34.22-1 | - |
Fixed versions
| 1.34.22-1 |
Sources
- osv: DEBIAN-CVE-2022-2582#Debian:13/golang-github-aws-aws-sdk-go
- https://security-tracker.debian.org/tracker/CVE-2022-2582
published · modified · JSON