browserify-sign vulnerable via an upper bound check issue in `dsaVerify` that leads to a signature forgery attack

🗓️ 31 Oct 2023 07:00:00Reported by MicrosoftType

Browserify-sign has an upper bound check issue in dsaVerify that allows signature forgery.

Reporter	Title	Published	Views	Family All 88
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics Mobile (Android) is affected by multiple vulnerabilities	21 Oct 202415:52	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Planning Analytics Workspace is affected by vulnerabilities in multiple Open Source Software (OSS) components	28 Mar 202415:34	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container Dashboard operands that use S3 storage are vulnerable to security restrictions bypass due to [CVE-2023-46234]	14 Dec 202310:36	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Dashboards on Cloud Pak for Data 4.8.3 has addressed security vulnerabilities	28 Feb 202419:19	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Deployment Intelligence app for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	9 Apr 202418:54	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Data is vulnerable to signature forgery attack due to browserify-sign ( CVE-2023-46234 )	8 Aug 202414:57	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics Mobile (iOS) is affected by multiple vulnerabilities	21 Oct 202415:51	–	ibm
AstraLinux	Astra Linux - уязвимость в node-browserify-sign	20 May 202605:53	–	astralinux
CBLMariner	CVE-2023-46234 affecting package reaper for versions less than 3.1.1-9	6 Jun 202419:53	–	cbl_mariner
Circl	CVE-2023-46234	26 Oct 202318:15	–	circl