CVE-2017-1000168 scalarmult() vulnerable to degenerate public keys

MediumCVSS 6.5 EPSS 1.3%

Published: 2017-11-17 20:00
Updated: 2026-06-17 03:58
Exploit status: No public exploit known

Sign in for asset impact Search another CVE

Description

sodiumoxide 0.0.13 and older scalarmult() vulnerable to degenerate public keys

Affected products

Product	Affected versions	Fixed in
crates.io sodiumoxide(crates.io)	< 0.0.14	0.0.14
crates.io sodiumoxide(crates.io)	>= 0.0.0-0, < 0.0.14	0.0.14
sodiumoxide project sodiumoxide	<= 0.0.13	No fix listed

References

nvd.nist.gov third-party-advisory vendor-advisory
github.com issue-tracking third-party-advisory
github.com patch
rustsec.org vendor-advisory
github.com
github.com product
crates.io product

CVSS v3.0

6.5 Medium

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Attack Vector: Network
Attack Complexity: Low
Privileges Required: None
User Interaction: Required
Scope: Unchanged
Confidentiality: High
Integrity: None
Availability: None

All scores (5)

v3.0 6.5 · nvd@nist.gov
v3.0 6.5 · github
v3.0 6.5 · osv:rustsec
v3.0 6.5 · osv:ghsa
v2.0 4.3 · nvd@nist.gov

Weakness & likelihood

EPSS (exploitation probability, 30 days): 1.25% (percentile 69.9)
CWE: CWE-1240 Use of a Cryptographic Primitive with a Risky Implementation

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.