PatchTheCVEecdh vulnerabilities and fixes
Recent CVEs affecting ecdh, with upgrade or downgrade steps. 1 tracked.
ecdh has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2023-02-24. Highest priority: CVE-2022-44310 (score 49/100).
- CVE-2022-44310 HIGH 7.5 UPGRADE In Development IL ecdh before 0.2.0, an attacker can send an invalid point (not on the curve) as the public ke
FAQ
How do I fix ecdh vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ecdh being exploited right now?
None of the tracked ecdh CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ecdh CVE should I patch first?
CVE-2022-44310 currently ranks highest (49/100): In Development IL ecdh before 0.2.0, an attacker can send an invalid point (not on the curve) as the public ke.