NetSight
high7.5

CVE-2019-25007

Incorrect implementation in streebog

Impact

Internal update-sigma function was implemented incorrectly and depending on debug-assertions it could've caused an incorrect result or panic for certain inputs.

Affected packages

EcosystemPackageAffectedFixed in
ruststreebog< 0.8.00.8.0

Affected products

VendorProductAffected versions
Streebog ProjectStreebog
before 0.8.0

Weakness classification

References