Description
Non constant time cryptographic operation in Devolutions.XTS.NET 2024.11.19 and earlier allows an attacker to render half of the encryption key obsolete via a timing attacks
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Devolutions | XTS.NET | < 2024.11.26 | 2024.11.26 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| NuGet | Devolutions.XTS.NET | < 2024.11.26 | 2024.11.26 | GHSA-j6vm-4r7g-x4gr |