CVE-2019-25006

High

An issue was discovered in the streebog crate before 0.8.0 for Rust. The Streebog hash function can produce the wrong answer.

mitre·CWE-327·Published 2020-12-31

CVSS

7.5

EPSS

0.01

KEV

Exploits

cve.orgen

125 chars

An issue was discovered in the streebog crate before 0.8.0 for Rust. The Streebog hash function can produce the wrong answer.

NVDen

125 chars

An issue was discovered in the streebog crate before 0.8.0 for Rust. The Streebog hash function can produce the wrong answer.

Internal `update-sigma` function was implemented incorrectly and depending on `debug-assertions` it could've caused an incorrect result or panic for certain inputs.

GHSAen

160 chars

Internal update-sigma function was implemented incorrectly and depending on debug-assertions it could've caused an incorrect result or panic for certain inputs.

NVDes

156 chars

Se detectó un problema en la crate streebog versiones anteriores a 0.8.0 para Rust. La función de hash Streebog puede producir la respuesta incorrecta.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	5.0	10.0	2.9	AV:N/AC:L/Au:N/C:N/I:N/A:P
3.1	Primary	NVD	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
3.1	Secondary	GHSA	7.5	—	—	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H