CVE-2024-40640
2 advisories.
crates.io/vodozemac CVE-2024-40640: low 3.7, EPSS 0.20%
vodozemac's usage of non-constant time base64 decoder could lead to leakage of secret key material
Action: Upgrade vodozemac to 0.7.0 or later.
cargo update -p vodozemac --precise 0.7.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.7.0 | - |
Fixed versions
| 0.7.0 |
Sources
- osv: GHSA-j8cm-g7r6-hfpq
- https://github.com/matrix-org/vodozemac/security/advisories/GHSA-j8cm-g7r6-hfpq
- https://nvd.nist.gov/vuln/detail/CVE-2024-40640
- https://github.com/matrix-org/vodozemac/commit/734b6c6948d4b2bdee3dd8b4efa591d93a61d272
- https://github.com/matrix-org/vodozemac/commit/77765dace11266ef9523301624a01265c6e0f790
- https://arxiv.org/abs/2108.04600
- https://github.com/matrix-org/vodozemac
- https://rustsec.org/advisories/RUSTSEC-2024-0354.html
CVE-2024-40640 · published · modified · JSON
crates.io/vodozemac CVE-2024-40640: low 2.9, EPSS 0.20%
Usage of non-constant time base64 decoder could lead to leakage of secret key material
Action: Upgrade vodozemac to 0.7.0 or later.
cargo update -p vodozemac --precise 0.7.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.0.0-0 | 0.7.0 | - |
Fixed versions
| 0.7.0 |
Sources
- osv: RUSTSEC-2024-0354
- nvd: CVE-2024-40640
- https://crates.io/crates/vodozemac
- https://rustsec.org/advisories/RUSTSEC-2024-0354.html
- https://github.com/matrix-org/vodozemac/commit/734b6c6948d4b2bdee3dd8b4efa591d93a61d272
CVE-2024-40640 · published · modified · JSON