Sodiumoxide Project Sodiumoxide vulnerabilities
2 known vulnerabilities affecting sodiumoxide_project/sodiumoxide.
Total CVEs
2
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1MEDIUM1
Vulnerabilities
Page 1 of 1
CVE-2019-25002P3CRITICALCVSS 9.8fixed in 0.2.52020-12-31
CVE-2019-25002 [CRITICAL] CVE-2019-25002: An issue was discovered in the sodiumoxide crate before 0.2.5 for Rust. generichash::Digest::eq comp
An issue was discovered in the sodiumoxide crate before 0.2.5 for Rust. generichash::Digest::eq compares itself to itself and thus has degenerate security properties.
ghsanvdosv
CVE-2017-1000168P4MEDIUMCVSS 6.5≤ 0.0.132017-11-17
CVE-2017-1000168 [MEDIUM] CVE-2017-1000168: sodiumoxide 0.0.13 and older scalarmult() vulnerable to degenerate public keys
sodiumoxide 0.0.13 and older scalarmult() vulnerable to degenerate public keys
ghsanvdosv