PatchTheCVEcsiro vulnerabilities
Recent CVEs affecting csiro products. 4 tracked.
csiro has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2024-05-07. Highest priority: CVE-2024-33782 (score 49/100).
- CVE-2024-33783 MEDIUM 6.5 DOWNGRADE MP-SPDZ v0.3.8 was discovered to contain a segmentation violation via the function osuCrypto::SilentMultiPprfR
- CVE-2024-33782 HIGH 7.5 DOWNGRADE MP-SPDZ v0.3.8 was discovered to contain a stack overflow via the function OTExtensionWithMatrix::extend in /O
- CVE-2024-33781 HIGH 7.5 DOWNGRADE MP-SPDZ v0.3.8 was discovered to contain a stack overflow via the function octetStream::get_bytes in /Tools/oc
- CVE-2024-33780 MEDIUM 6.5 DOWNGRADE MP-SPDZ v0.3.8 was discovered to contain a segmentation violation via the function osuCrypto::copyOut at /Tool
FAQ
How do I fix csiro vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is csiro being exploited right now?
None of the tracked csiro CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which csiro CVE should I patch first?
CVE-2024-33782 currently ranks highest (49/100): MP-SPDZ v0.3.8 was discovered to contain a stack overflow via the function OTExtensionWithMatrix::extend in /O.