Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Pdugre

#55037of 60,403
5.1Total CVSS
Vulnerabilities · 1
PT-2024-17301
2024-11-27
5.1
CVE-2024-11862
Devolutions
Devolutions.Xts.Net
The issue concerns a non-constant time cryptographic operation, which can be exploited via timing attacks. This allows an attacker to render half of the encryption key obsolete. Successful exploitation downgrades the security guarantees of the XTS mode to those of ECB mode, enabling block swapping and identification of identical blocks. Timing attacks require specific conditions to be exploitable.