Lucene search
GoogleOSV:CVE-2023-44273HistorySep 28, 2023 - 4:15 a.m.
CVE-2023-44273
2023-09-2804:15:12
Google
osv.dev
1
consensys
gnark-crypto
signature malleability
eddsa
ecdsa
deserialisation
security vulnerability
Consensys gnark-crypto through 0.11.2 allows Signature Malleability. This occurs because deserialisation of EdDSA and ECDSA signatures does not ensure that the data is in a certain interval.
Related
osv
osv
Consensys gnark-crypto allows Signature Malleability
2023-09-28 06:30:20
Signature malleability in github.com/consensys/gnark-crypto
2023-10-05 19:48:40
prion
prion
Design/Logic Flaw
2023-09-28 04:15:00
cvelist
cvelist
CVE-2023-44273
2023-09-28 00:00:00
nvd
nvd
CVE-2023-44273
2023-09-28 04:15:12
github
github
Consensys gnark-crypto allows Signature Malleability
2023-09-28 06:30:20
cve
cve
CVE-2023-44273
2023-09-28 04:15:12
gitlab
gitlab
Deserialization of Untrusted Data
2023-09-28 00:00:00
veracode
veracode
Signature Malleability
2024-02-06 06:06:23