Ecosyste.ms: Advisories

Security Advisories: GSA_kwCzR0hTQS05NzhqLTg4ZjMtcDVqM84AArs3

Threshold value is ignored (all shares are n=3)

Affected versions of this crate did not properly calculate secret shares requirements.

This reduces the security of the algorithm by restricting the crate to always
using a threshold value of three, rather than a configurable limit.

The flaw was corrected by correctly configuring the threshold.

Permalink: https://github.com/advisories/GHSA-978j-88f3-p5j3
JSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS05NzhqLTg4ZjMtcDVqM84AArs3
Source: GitHub Advisory Database
Origin: Unspecified
Severity: Low
Classification: General
Published: almost 2 years ago
Updated: over 1 year ago

Identifiers: GHSA-978j-88f3-p5j3
References:

• https://github.com/Nebulosus/shamir/issues/3
• https://rustsec.org/advisories/RUSTSEC-2020-0160.html
• https://github.com/advisories/GHSA-978j-88f3-p5j3

Repository: https://github.com/Nebulosus/shamir
Blast Radius: 0.0

Affected Packages