CVE-2024-11862
Nov. 27, 2024, 3:15 p.m.
None
No Score
Description
Non constant time cryptographic operation in Devolutions.XTS.NET 2024.11.19 and earlier allows an attacker to render half of the encryption key obsolete via a timing attacks
Product(s) Impacted
| Product | Versions |
|---|---|
| Devolutions.XTS.NET |
|
Weaknesses
CWE-385
Covert Timing Channel
Covert timing channels convey information by modulating some aspect of system behavior over time, so that the program receiving the information can observe system behavior and infer protected information.
Tags
Date
- Published: Nov. 27, 2024, 3:15 p.m.
- Last Modified: Nov. 27, 2024, 3:15 p.m.
Status : Awaiting Analysis
CVE has been recently published to the CVE List and has been received by the NVD.
More infoSource
security@devolutions.net
*Disclaimer: Some vulnerabilities do not have an associated CPE. To enhance the data, we use AI to infer CPEs based on CVE details. This is an automated process and might not always be accurate.