Beveiligingsadvies

CVE-2025-67897

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-12-14 04:35:24
Laatst bijgewerkt 2025-12-15 21:29:01
Toegewezen door mitre
CVSS-score 5.3
Status PUBLISHED

Beschrijving

In Sequoia before 2.1.0, aes_key_unwrap panics if passed a ciphertext that is too short. A remote attacker can take advantage of this issue to crash an application by sending a victim an encrypted message with a crafted PKESK or SKESK packet.