Skip to content
OpenAdvisories

Vendor

Ribose

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • High 7.5

    RNP 0.18.0 Vulnerable PKESK session keys

    In RNP version 0.18.0 a refactoring regression causes the symmetric session key used for Public-Key Encrypted Session Key (PKESK) packets to be left uninitialized except for zeroing, resulting in it always being an all-zero byte array. Any data encrypted usin…