CVE-2012-2743

Description

Revelation 0.4.13-2 and earlier does not iterate through SHA hashing algorithms for AES encryption, which makes it easier for context-dependent attackers to guess passwords via a brute force attack.

How to fix CVE-2012-2743

To remediate CVE-2012-2743, upgrade the affected package to a fixed version below.

• Debian/revelation—upgrade to 0.4.11-10 or later

Is CVE-2012-2743 being exploited?

Low — EPSS is 1.1%, meaning exploitation activity has not been observed at scale.

Affected packages (1)

• from 0, < 0.4.11-10

References (1)

• ADVISORYsecurity-tracker.debian.org/tracker/CVE-2012-2743