GHSA-399h-cmvp-qgx5HighCVSS 7.2

Incorrect Default Permissions in Binance tss-lib

Published
June 29, 2021
Last Modified
October 2, 2023

🔗 CVE IDs covered (1)

CVE-2020-12118 →

📋 Description

The keygen protocol implementation in Binance tss-lib before 1.2.0 allows attackers to generate crafted h1 and h2 parameters in order to compromise a signing round or obtain sensitive information from other parties.

Specific Go Packages Affected

github.com/binance-chain/tss-lib/ecdsa/keygen

🎯 Affected products1

  • go/github.com/binance-chain/tss-lib:< 1.2.0

🔗 References (5)