Lucene search
GoogleOSV:CVE-2020-14967HistoryJun 22, 2020 - 12:15 p.m.
CVE-2020-14967
2020-06-2212:15:10
Google
osv.dev
2
An issue was discovered in the jsrsasign package before 8.0.18 for Node.js. Its RSA PKCS1 v1.5 decryption implementation does not detect ciphertext modification by prepending ‘\0’ bytes to ciphertexts (it decrypts modified ciphertexts without error). An attacker might prepend these bytes with the goal of triggering memory corruption issues.
Related
cve
cve
CVE-2020-14967
2020-06-22 12:15:10
osv
osv
RSA PKCS#1 decryption vulnerability with prepending zeros in jsrsasign
2020-06-26 16:27:08
veracode
veracode
Insecure RSA Signature Validation
2020-06-23 03:45:44
cvelist
cvelist
CVE-2020-14967
2020-06-22 11:19:35
nvd
nvd
CVE-2020-14967
2020-06-22 12:15:10
github
github
RSA PKCS#1 decryption vulnerability with prepending zeros in jsrsasign
2020-06-26 16:27:08
prion
prion
Memory corruption
2020-06-22 12:15:00