CVE-2022-47931
Critical
Description
IO FinNet tss-lib before 2.0.0 allows a collision of hash values.
SeverityCritical
CVSS9.1
Exploit probability—
ProductIofinnet Tss-lib
PublishedDec 23, 2022
First seenDec 23, 2022
Weakness typeCWE-326CWE-326
How to fix
Update
- iofinnet tss-lib2.0.0 or later
- github.com/bnb-chain/tss-lib1.3.6-0.20230324145555-bb6fb30bd3eb or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| iofinnet tss-lib | v < 2.0.0 | 2.0.0 |
| github.com/bnb-chain/tss-libGo | v < 1.3.6-0.20230324145555-bb6fb30bd3eb | 1.3.6-0.20230324145555-bb6fb30bd3eb |
| github.com/binance-chain/tss-libGo | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.