CVE-2024-11862

Devolutions / XTS.NET PUBLISHED

Description (CNA)

Non constant time cryptographic operation in Devolutions.XTS.NET 2024.11.19 and earlier allows an attacker to render half of the encryption key obsolete via a timing attacks

Affected (CNA)

Vendor / product	Versions
Devolutions / XTS.NET	affected 0 before 2024.11.26

CWE

CWE-385

References

https://github.com/Devolutions/XTS.NET/security/advisories/GHSA-j6vm-4r7g-x4gr

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.