CVE-2022-45195
SimpleXMQ before 3.4.0, as used in SimpleX Chat before 4.2, does not apply a key derivation function to intended data, which can interfere with forwar...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
SimpleXMQ before 3.4.0, as used in SimpleX Chat before 4.2, does not apply a key derivation function to intended data, which can interfere with forward secrecy and can have other impacts if there is a compromise of a single private key. This occurs in the X3DH key exchange for the double ratchet protocol.
Références
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web github.com
- web github.com
- web simplex.chat