Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Github.com/supranational/blst: blst cryptographic library: denial of service via out-of-bounds stack write in key generation
Vulnerability Description
A flaw was found in the blst cryptographic library. This out-of-bounds stack write vulnerability, specifically in the blst_sha256_bcopy assembly routine, occurs due to a missing zero-length guard. A remote attacker can exploit this by providing a zero-length salt parameter to key generation functions, such as blst_keygen_v5(), if the application exposes this functionality. Successful exploitation leads to memory corruption and immediate process termination, resulting in a denial-of-service (DoS) condition.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Vulnerability Type
跨界内存写
Vulnerability Title
blst 安全漏洞
Vulnerability Description
blst是Supranational开源的一个签名库。 blst存在安全漏洞，该漏洞源于blst_sha256_bcopy汇编例程缺少零长度防护，可能导致内存损坏和拒绝服务。
CVSS Information
N/A
Vulnerability Type
N/A