Skip to content
OpenAdvisories

Package · crates.io

mykey

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    GHSA-fwjg-cm92-j3hj

    Pre-shared key mode transmits the TGK in cleartext, exposing the SRTP master key

    `mykey` implements MIKEY (RFC 3830) for SRTP key exchange. Pre-shared key mode transmitted the TEK Generation Key (TGK) in the clear. `MikeyMessage::new_psk_init` built its KEMAC payload with `EncAlg::Null` and placed the TGK in `enc_data` verbatim. Anyone ab…

    mykey crates.io