CVE-2020-12118
High
Description
The keygen protocol implementation in Binance tss-lib before 1.2.0 allows attackers to generate crafted h1 and h2 parameters in order to compromise a signing round or obtain sensitive information from other parties.
SeverityHigh
CVSS8.2
Exploit probability—
ProductBinance Tss-lib
PublishedApr 23, 2020
First seenApr 23, 2020
How to fix
Update
- binance tss-lib1.2.0 or later
- github.com/binance-chain/tss-lib1.2.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| binance tss-lib | v < 1.2.0 | 1.2.0 |
| github.com/binance-chain/tss-libGo | v < 1.2.0 | 1.2.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.