Medium · 6.5 CVE-2017-1000168 EUVD-2021-1520GHSA-2wc6-2rcj-8v76RUSTSEC-2017-0001

scalarmult() vulnerable to degenerate public keys

Published Nov 17, 2017 · Updated Sep 16, 2024 · Assigned by mitre

Description

sodiumoxide 0.0.13 and older scalarmult() vulnerable to degenerate public keys

Ecosystem	Package	Affected	Fixed	Record
crates.io	sodiumoxide	< 0.0.14	0.0.14	GHSA-2wc6-2rcj-8v76
crates.io	sodiumoxide	>= 0.0.0-0, < 0.0.14	0.0.14	RUSTSEC-2017-0001

OSV:GHSA	v3.0	6.5
OSV:RUSTSEC	v3.0	6.5