We found results for “”
WS-2020-0444
Good to know:
Date: November 3, 2024
All versions of shamir rust crate before 2.0.0 did not properly calculate secret shares requirements. This reduces the security of the (shamir secret sharing) algorithm by restricting the crate to always using a threshold value of three, rather than a configurable limit.
Language: RUST
Severity Score
Severity Score
Weakness Type (CWE)
Information Leak / Disclosure
CWE-200Top Fix
CVSS v3.1
Base Score: |
|
---|---|
Attack Vector (AV): | LOCAL |
Attack Complexity (AC): | LOW |
Privileges Required (PR): | LOW |
User Interaction (UI): | NONE |
Scope (S): | UNCHANGED |
Confidentiality (C): | NONE |
Integrity (I): | NONE |
Availability (A): | HIGH |