Multi-protocol Spdz vulnerabilities

2 known vulnerabilities in Multi-protocol Spdz from Csiro. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  MP-SPDZ: Stack-based Buffer Overflow

  CVE-2024-33782May 7, 2024FundanMPC

  MP-SPDZ v0.3.8 was discovered to contain a stack overflow via the function OTExtensionWithMatrix::extend in /OT/OTExtensionWithMatrix.cpp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted message.

• 7.5 High severity

  mp-spdz: Out-of-bounds Read

  CVE-2024-33781May 7, 2024Data61

  MP-SPDZ v0.3.8 was discovered to contain a stack overflow via the function octetStream::get_bytes in /Tools/octetStream.cpp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted message.