Threats Tagged 'cve-2026-42770'

A vulnerability exists in EVP_PKEY_derive_set_peer() when called with a DHX (X9.42) peer key, where the peer key's subgroup membership is not properly verified. This allows a malicious peer to use crafted domain parameters to leak the victim's private key through a small-subgroup confinement attack. The issue primarily affects deployments using long-lived DHX keys in CMP or bespoke applications. The severity is considered low due to the narrow attack surface.

Red Hat Discovery, also known as Discovery, is an inspection and reporting tool that finds, identifies, and reports environment data, or facts, such as the number of physical and virtual systems on a network, their operating systems, and relevant configuration data stored within them. Discovery also identifies and reports more detailed facts for some versions of key Red Hat packages and products that it finds in the network.