Vendor
Ribose
1 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
High 7.5
RNP 0.18.0 Vulnerable PKESK session keys
In RNP version 0.18.0 a refactoring regression causes the symmetric session key used for Public-Key Encrypted Session Key (PKESK) packets to be left uninitialized except for zeroing, resulting in it always being an all-zero byte array. Any data encrypted usin…