PT-2021-30870 · Unknown · Opencryptoki

Published 2021-10-27 · Updated 2021-10-27

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions openCryptoki (affected versions not specified)

Description The issue is related to the incorrect handling of certain EC keys by openCryptoki, which could allow an attacker to perform an invalid curve attack.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

MGASA-2021-0492

Affected Products

Opencryptoki

References · 5

• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/FLP3UNIVGYENSFGVADMQ2IYP4A3TDYJC · Vendor Advisory
• https://advisories.mageia.org/MGASA-2021-0492.html · Security Note
• https://osv.dev/vulnerability/MGASA-2021-0492 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5031-1 · Vendor Advisory
• https://bugs.mageia.org/show_bug.cgi?id=29328 · Note