CVE-2014-125055

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

A vulnerability, which was classified as problematic, was found in agnivade easy-scrypt. Affected is the function VerifyPassphrase of the file scrypt.go. The manipulation leads to observable timing discrepancy. The complexity of an attack is rather high. The exploitability is told to be difficult. Upgrading to version 1.0.0 is able to address this issue. The name of the patch is 477c10cf3b144ddf96526aa09f5fdea613f21812. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-217596.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-208

Affected software

No affected versions have been published.

Timeline

Published
Jan 7, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2014

CVE-2014-1250565.3A vulnerability was found in Pylons horus and classified as problematic. Affected by this issue is some unknown functionality of the file hoCVE-2014-1250579.8A vulnerability was found in mrobit robitailletheknot. It has been classified as problematic. This affects an unknown part of the file app/fCVE-2014-1250589.8A vulnerability was found in LearnMeSomeCodes project3 and classified as critical. This issue affects the function search_first_name of the CVE-2014-1250599.8A vulnerability, which was classified as problematic, has been found in sternenseemann sternenblog. This issue affects the function blog_indCVE-2014-1250609.8A vulnerability, which was classified as critical, was found in holdennb CollabCal. Affected is the function handleGet of the file calenderSCVE-2014-1250619.8** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in peel filebroker and classified as critical. Affected by this issue is the functCVE-2014-1250629.8A vulnerability classified as critical was found in ananich bitstorm. Affected by this vulnerability is an unknown functionality of the fileCVE-2014-1250639.8A vulnerability was found in ada-l0velace Bid and classified as critical. This issue affects some unknown processing. The manipulation leadsCVE-2014-1250659.8A vulnerability, which was classified as critical, was found in john5223 bottle-auth. Affected is an unknown function. The manipulation leadCVE-2014-1250667.5A vulnerability was found in emmflo yuko-bot. It has been declared as problematic. This vulnerability affects unknown code. The manipulationCVE-2014-1250679.8A vulnerability classified as critical was found in corincerami curiosity. Affected by this vulnerability is an unknown functionality of theCVE-2014-1250685.3A vulnerability was found in saxman maps-js-icoads and classified as critical. This issue affects some unknown processing of the file http-s
CVE-2014-125055: Medium severity, CVSS 5.3 | Vulnix