Skip to content
Noroxi

m2crypto project records

2 published records for vendor m2crypto project.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
100%
Median publish → KEV
No record has entered KEV

Records by year

  1. 21
  2. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

2 records
  • M2crypto: bleichenbacher timing attacks in the rsa decryption api - incomplete fix for cve-2020-25657

    HighCVSS 7.5No exploitEPSS 1%

    redhat · enterprise linuxFeb 5, 2024

  • A flaw was found in all released versions of m2crypto, where they are vulnerable to Bleichenbacher timing attacks in the RSA decryption API

    MediumCVSS 5.9No exploitEPSS 1%

    m2crypto project · m2cryptoJan 12, 2021