CVE-2019-25002 - An issue was discovered in the sodiumoxide crate before 0.2.5 for Rust

Back Back to CVE browser

CRITICAL

An issue was discovered in the sodiumoxide crate before 0.2.5 for Rust

Published Dec 31, 2020

9.8

CRITICAL

CVSS 3.1

EPSS 1.50%

Description

An issue was discovered in the sodiumoxide crate before 0.2.5 for Rust. generichash::Digest::eq compares itself to itself and thus has degenerate security properties.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-697

References (6)

Link	Providers	Tags
https://github.com/advisories/GHSA-wrvc-72w7-xpmj		Advisory
https://github.com/sodiumoxide/sodiumoxide/commit/38490723927f230498adf795153e6cd3cb08b6a8
https://github.com/sodiumoxide/sodiumoxide/pull/381
https://github.com/sodiumoxide/sodiumoxide/pull/381/commits/fae052b834b097ced9a89a8fff8466e18f383070
https://nvd.nist.gov/vuln/detail/CVE-2019-25002
https://rustsec.org/advisories/RUSTSEC-2019-0026.html		x_refsource_MISCPatchThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Dec 31, 2020

Updated Aug 5, 2024

Reserved Dec 31, 2020

Link CVE-2019-25002

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-25002

Red Hat

Severity n/a

Public date n/a

Links CVE-2019-25002

GHSA-WRVC-72W7-XPMJ