Ecosyste.ms: Advisories

Security Advisories: MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTM5d3ItZjRmZi14bTZw

Incorrect implementation in streebog

Internal update-sigma function was implemented incorrectly and depending on debug-assertions it could've caused an incorrect result or panic for certain inputs.

Permalink: https://github.com/advisories/GHSA-39wr-f4ff-xm6p
JSON: https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTM5d3ItZjRmZi14bTZw
Source: GitHub Advisory Database
Origin: Unspecified
Severity: High
Classification: General
Published: over 2 years ago
Updated: 6 months ago

CVSS Score: 7.5
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Identifiers: GHSA-39wr-f4ff-xm6p, CVE-2019-25007
References:

• https://nvd.nist.gov/vuln/detail/CVE-2019-25007
• https://github.com/RustCrypto/hashes/pull/91
• https://rustsec.org/advisories/RUSTSEC-2019-0030.html
• https://github.com/advisories/GHSA-39wr-f4ff-xm6p

Repository: https://github.com/RustCrypto/hashes
Blast Radius: 11.5

Affected Packages