Lucene search

CVE-2023-46234

🗓️ 26 Oct 2023 15:09:15Reported by GoogleType

osv🔗 osv.dev👁 23 Views

browserify-sign package vulnerability with signature forgery attack patched in version 4.2.2

Reporter	Title	Published	Views	Family All 46
Tenable Nessus	RHEL 6 : browserify-sign (Unpatched Vulnerability)	11 May 202400:00	–	nessus
Tenable Nessus	Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 23.10 : browserify-sign vulnerability (USN-6800-1)	30 May 202400:00	–	nessus
Tenable Nessus	RHEL 7 : browserify-sign (Unpatched Vulnerability)	11 May 202400:00	–	nessus
Tenable Nessus	Debian dla-3635 : node-browserify-sign - security update	29 Oct 202300:00	–	nessus
Tenable Nessus	Debian DSA-5539-1 : node-browserify-sign - security update	31 Oct 202300:00	–	nessus
Tenable Nessus	Atlassian Confluence 7.11.x < 7.19.29 / 7.20.x < 8.5.17 / 8.6.x < 8.9.8 / 9.0.x < 9.1.1 (CONFSERVER-98021)	10 Jan 202500:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2023-46234	5 Mar 202500:00	–	nessus
Tenable Nessus	Fedora 38 : yarnpkg (2024-5ecc250449)	28 Feb 202400:00	–	nessus
Tenable Nessus	Fedora 39 : yarnpkg (2024-28fc0c2ef4)	28 Feb 202400:00	–	nessus
Cvelist	CVE-2023-46234 browserify-sign vulnerable via an upper bound check issue in `dsaVerify` that leads to a signature forgery attack	26 Oct 202314:31	–	cvelist

Source	Link
github	www.github.com/browserify/browserify-sign/security/advisories/GHSA-x9w5-v3q2-3rhw
debian	www.debian.org/security/2023/dsa-5539
github	www.github.com/browserify/browserify-sign/commit/85994cd6348b50f2fd1b73c54e20881416f44a30
lists	www.lists.debian.org/debian-lts-announce/2023/10/msg00040.html
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/3HUE6ZR5SL73KHL7XUPAOEL6SB7HUDT2/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/6PVVPNSAGSDS63HQ74PJ7MZ3MU5IYNVZ/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

26 Oct 2023 15:15Current

7High risk

Vulners AI Score7

CVSS37.5

EPSS0.00189