CVE-2019-16143
Summary
| CVE | CVE-2019-16143 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2019-09-09 12:15:00 UTC |
| Updated | 2020-08-31 15:13:00 UTC |
| Description | An issue was discovered in the blake2 crate before 0.8.1 for Rust. The BLAKE2b and BLAKE2s algorithms, when used with HMAC, produce incorrect results because the block sizes are half of the required sizes. |
Risk And Classification
Problem Types: CWE-327
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Blake2 | Blake2-rust | All | All | All | All |
| Application | Blake2 | Blake2-rust | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| About RustSec › RustSec Advisory Database | MISC | rustsec.org | Third Party Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.