CVE-2019-20399

Name of the Vulnerable Software and Affected Versions Parity libsecp256k1-rs versions prior to 0.3.1

Description A timing vulnerability in the Scalar::check overflow function potentially allows an attacker to leak information via a side-channel attack.

Recommendations For versions prior to 0.3.1, update to version 0.3.1 or later to resolve the issue. As a temporary workaround, consider restricting the use of the Scalar::check overflow function until a patch is available.