Vulnerabilities > CVE-2020-17478 - Information Exposure Through Discrepancy vulnerability in P5-Crypt-Perl Project P5-Crypt-Perl

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

NONE

Availability impact

NONE

network

low complexity

NVD

Published: 2020-08-10

Updated: 2020-08-12

Summary

ECDSA/EC/Point.pm in Crypt::Perl before 0.33 does not properly consider timing attacks against the EC point multiplication algorithm.

Part	Description	Count
Application	P5-Crypt-Perl_Project P5 Crypt Perl Project P5 Crypt Perl 0.0.31 P5 Crypt Perl Project P5 Crypt Perl 0.01 P5 Crypt Perl Project P5 Crypt Perl 0.02 P5 Crypt Perl Project P5 Crypt Perl 0.11 P5 Crypt Perl Project P5 Crypt Perl 0.12 P5 Crypt Perl Project P5 Crypt Perl 0.13 P5 Crypt Perl Project P5 Crypt Perl 0.15 P5 Crypt Perl Project P5 Crypt Perl 0.16 P5 Crypt Perl Project P5 Crypt Perl 0.17 P5 Crypt Perl Project P5 Crypt Perl 0.18 P5 Crypt Perl Project P5 Crypt Perl 0.19 P5 Crypt Perl Project P5 Crypt Perl 0.20 P5 Crypt Perl Project P5 Crypt Perl 0.021 P5 Crypt Perl Project P5 Crypt Perl 0.022 P5 Crypt Perl Project P5 Crypt Perl 0.22 P5 Crypt Perl Project P5 Crypt Perl 0.23 P5 Crypt Perl Project P5 Crypt Perl 0.26 P5 Crypt Perl Project P5 Crypt Perl 0.30 P5 Crypt Perl Project P5 Crypt Perl 0.31 P5 Crypt Perl Project P5 Crypt Perl 0.032 P5 Crypt Perl Project P5 Crypt Perl 0.32	21