CVE-2024-11862

Non constant time cryptographic operation in Devolutions.XTS.NET 2024.11.19 and earlier allows an attacker to render half of the encryption key obsolete via a timing attacks

Score

CVSS 4.0 5.1 Medium

Status

Deferred - security@devolutions.net

Published

2024-11-27

Last modified

2024-11-27

Weaknesses

CWE-385

Affected products

• Xts.net (Devolutions)

References

• https://github.com/Devolutions/XTS.NET/security/advisories/GHSA-j6vm-4r7g-x4gr