CVE-2017-1000168 — MEDIUM (6.5)

CVE-2017-1000168 is a vulnerability with a CVSS score of 6.5 (MEDIUM). sodiumoxide 0.0.13 and older scalarmult() vulnerable to degenerate public keys

CVE-2017-1000168 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Check the references section above for vendor advisories and patch information. Affected products include: Sodiumoxide Project Sodiumoxide.

Vulnerability Description

sodiumoxide 0.0.13 and older scalarmult() vulnerable to degenerate public keys

6.5

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

NONE

Availability

NONE

Vendor	Product	Versions
Sodiumoxide Project	Sodiumoxide	<= 0.0.13

What is CVE-2017-1000168?

CVE-2017-1000168 is a vulnerability with a CVSS score of 6.5 (MEDIUM). sodiumoxide 0.0.13 and older scalarmult() vulnerable to degenerate public keys

How severe is CVE-2017-1000168?

CVE-2017-1000168 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2017-1000168?

Check the references section above for vendor advisories and patch information. Affected products include: Sodiumoxide Project Sodiumoxide.