Vulnerability in Devolutions Xts.net

CVE-2024-11862

Non constant time cryptographic operation in Devolutions.XTS.NET 2024.11.19 and earlier allows an attacker to render half of the encryption key obsolete via a timing attacks

EPSS: 0.001 (3.8th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References