Lack of data validation In libcrypto++
Description
A Fault Injection vulnerability in the SymmetricDecrypt function in cryptopp/elgamal.h of Cryptopp Crypto++ 8.9, allows an attacker to co-reside in the same system with a victim process to disclose information and escalate privileges.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version |
|---|---|---|
 debian 11 | ||
debian 12 | ||
debian 13 | ||
debian 14 |
Aliases
1. 2. 3. 4. 5.