Diffie-hellman Key Exchange Project vulnerabilities
We track 2 vulnerabilities in Diffie-hellman Key Exchange Project products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 26, 2024.
2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score
Latest Diffie-hellman Key Exchange Project vulnerabilities
- 7.5 High severity
diffie-hellman_key_exchange: Improper Certificate Validation
Validating the order of the public keys in the Diffie-Hellman Key Agreement Protocol, when an approved safe prime is used, allows remote attackers (from the client side) to trigger unnecessarily expensive server-side DHE modular-exponentiation calculations. Th
- 7.5 High severity
Diffie-hellman Key Exchange: Uncontrolled Resource Consumption
The Diffie-Hellman Key Agreement Protocol allows use of long exponents that arguably make certain calculations unnecessarily expensive, because the 1996 van Oorschot and Wiener paper found that "(appropriately) short exponents" can be used when there are adequ