Diffie-hellman Key Exchange vulnerabilities

2 known vulnerabilities in Diffie-hellman Key Exchange from Diffie-hellman Key Exchange Project. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  diffie-hellman_key_exchange: Improper Certificate Validation

  CVE-2024-41996Aug 26, 2024Diffie-hellman Key Exchange ProjectEPSS 1.07%

  Validating the order of the public keys in the Diffie-Hellman Key Agreement Protocol, when an approved safe prime is used, allows remote attackers (from the client side) to trigger unnecessarily expensive server-side DHE modular-exponentiation calculations. Th

• 7.5 High severity

  Diffie-hellman Key Exchange: Uncontrolled Resource Consumption

  CVE-2022-40735Nov 14, 2022Diffie-hellman Key Exchange ProjectEPSS 3.55%

  The Diffie-Hellman Key Agreement Protocol allows use of long exponents that arguably make certain calculations unnecessarily expensive, because the 1996 van Oorschot and Wiener paper found that "(appropriately) short exponents" can be used when there are adequ