OMGeeky/advisory-db
1
0
Fork 0
mirror of https://github.com/OMGeeky/advisory-db.git synced 2026-02-13 21:18:11 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
ee38ef509c7be2a44587fbbacab3c7f8a1f6ecd0
advisory-db/crates/streebog/RUSTSEC-2019-0030.md
Yechan Bae 846dfb93a3 Update CVE numbers (#542)
2021-01-04 09:02:59 -08:00

499 B
Raw Blame History 

[advisory]
id = "RUSTSEC-2019-0030"
package = "streebog"
aliases = ["CVE-2020-25575", "CVE-2019-25006", "CVE-2019-25007"]
categories = ["crypto-failure"]
date = "2019-10-06"
url = "https://github.com/RustCrypto/hashes/pull/91"

[versions]
patched = [">= 0.8.0"]

Incorrect implementation of the Streebog hash functions

Internal update-sigma function was implemented incorrectly and depending on debug-assertions it could've caused an incorrect result or panic for certain inputs.