CVE-2022-44310

7.5HIGH

In Development IL ecdh before 0.2.0, an attacker can send an invalid point (not on the curve) as the public key, and obtain the derived shared secret.

公開日: 2/24/2023更新日: 3/12/2025
NVDで表示MITREで表示

説明

In Development IL ecdh before 0.2.0, an attacker can send an invalid point (not on the curve) as the public key, and obtain the derived shared secret.

AI分析AIによる分析

影響を受ける製品

ecdh_projectecdh

参照