CNNVD-202508-3588 Information
Aug 29, 2025
cve
CNNVD ID
CNNVD-202508-3588
Related CVE
- CNNVD Published: 2025-08-29
Description (Chinese)
Oberon microsystem AG ocrypto library是瑞士Oberon公司的一个加密软件库。 Oberon microsystem AG ocrypto library 1.0.0至1.5.1之前版本存在安全漏洞，该漏洞源于AES-CBC PKCS#7解密操作存在填充预言攻击。
Description (English)
Oberon Microsystem AG ocrypto library is an encryption software library of Oberon, Switzerland. There was a security loophole in previous versions of Oberon Microsystem AG ocrypto library 1.0.0 to 1.5.1, which originated from the predicated attack of the AES-CBC PKCS#7 decryption operation.
Hazard Level
High
Vulnerability Type
其他
Affected Vendor
Oberon
Published
2025-08-29
Last Modified
2026-02-24
References
https://www.oberon.ch/security-advisories/cve-2025-7383/ https://nvd.nist.gov/vuln/detail/CVE-2025-7383 https://access.redhat.com/security/cve/cve-2025-7383
Patch
https://www.oberon.ch/products/oberon-psa-crypto/
Share on: