CVE catalog

CVE-2024-58262

DEBIAN-CVE-2024-58262

[CVE catalog]

Severity
Low · CVSS 2.9CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.17% · Oct 25, 2026

The curve25519-dalek crate before 4.1.3 for Rust has a constant-time operation on elliptic curve scalars that is removed by LLVM.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianrust-curve25519-dalek134.1.3+20240618+dfsg-1fixed
Debianrust-curve25519-dalek144.1.3+20240618+dfsg-1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianrust-curve25519-dalekdeb134.1.3+20240618+dfsg-1Not reportedDEBIAN-CVE-2024-58262Not reported
Debianrust-curve25519-dalekdeb144.1.3+20240618+dfsg-1Not reportedDEBIAN-CVE-2024-58262Not reported

OpenFactory catalog packages

[Debian 13 (Trixie)]

  • [librust-curve25519-dalek-derive-dev]Fixed

    Source package: [rust-curve25519-dalek]

    Details (2)

    • 0.1.1+4.1.3+20240618+dfsg-9 · all · trixie

      Fixed · Fixed: 4.1.3+20240618+dfsg-1

      pypi · rust-curve25519-dalek · debian · 13

    • 0.1.1+4.1.3+20240618+dfsg-9 · all · trixie

      Fixed · Fixed: 4.1.3+20240618+dfsg-1

      pypi · rust-curve25519-dalek · debian · 13

  • [librust-curve25519-dalek-dev]Fixed

    Source package: [rust-curve25519-dalek]

    Details (2)

    • 4.1.3+4.1.3+20240618+dfsg-9 · all · trixie

      Fixed · Fixed: 4.1.3+20240618+dfsg-1

      pypi · rust-curve25519-dalek · debian · 13

    • 4.1.3+4.1.3+20240618+dfsg-9 · all · trixie

      Fixed · Fixed: 4.1.3+20240618+dfsg-1

      pypi · rust-curve25519-dalek · debian · 13

  • [librust-ed25519-dalek-dev]Fixed

    Source package: [rust-curve25519-dalek]

    Details (2)

    • 2.1.1+4.1.3+20240618+dfsg-9 · all · trixie

      Fixed · Fixed: 4.1.3+20240618+dfsg-1

      pypi · rust-curve25519-dalek · debian · 13

    • 2.1.1+4.1.3+20240618+dfsg-9 · all · trixie

      Fixed · Fixed: 4.1.3+20240618+dfsg-1

      pypi · rust-curve25519-dalek · debian · 13

  • [librust-x25519-dalek-dev]Fixed

    Source package: [rust-curve25519-dalek]

    Details (2)

    • 2.0.1+4.1.3+20240618+dfsg-9 · all · trixie

      Fixed · Fixed: 4.1.3+20240618+dfsg-1

      pypi · rust-curve25519-dalek · debian · 13

    • 2.0.1+4.1.3+20240618+dfsg-9 · all · trixie

      Fixed · Fixed: 4.1.3+20240618+dfsg-1

      pypi · rust-curve25519-dalek · debian · 13

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX]