What is GHSA-7cqg-8449-rmfv?

GHSA-7cqg-8449-rmfv is a security advisory published by GitHub Security Advisories with Medium severity. Observable Discrepancy in libsecp256k1-rs

Which CVE IDs does GHSA-7cqg-8449-rmfv cover?

GHSA-7cqg-8449-rmfv covers the following CVE IDs: CVE-2019-20399. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-7cqg-8449-rmfv?

GHSA-7cqg-8449-rmfv has a CVSS v3 base score of 5.9, published by GitHub Security Advisories.

Which products are affected by GHSA-7cqg-8449-rmfv?

GHSA-7cqg-8449-rmfv affects 1 product, including: rust/libsecp256k1-rs:\u003c 0.3.1.

GHSA-7cqg-8449-rmfvMediumCVSS 5.9

Observable Discrepancy in libsecp256k1-rs

Vendor

GitHub Security Advisories

Published

August 25, 2021

Last Modified

February 3, 2023

🔗 CVE IDs covered (1)

CVE-2019-20399 →

📋 Description

A timing vulnerability in the Scalar::check_overflow function in Parity libsecp256k1-rs before 0.3.1 potentially allows an attacker to leak information via a side-channel attack.

🎯 Affected products1

rust/libsecp256k1-rs:< 0.3.1

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2019-20399
https://github.com/paritytech/libsecp256k1/commit/11ba23a9766a5079918cd9f515bc100bc8164b50
https://rustsec.org/advisories/RUSTSEC-2020-0156.html
https://github.com/advisories/GHSA-7cqg-8449-rmfv