Lucene search
PRIOn knowledge basePRION:CVE-2020-14967HistoryJun 22, 2020 - 12:15 p.m.
Memory corruption
2020-06-2212:15:00
PRIOn knowledge base
www.prio-n.com
4
An issue was discovered in the jsrsasign package before 8.0.18 for Node.js. Its RSA PKCS1 v1.5 decryption implementation does not detect ciphertext modification by prepending ‘\0’ bytes to ciphertexts (it decrypts modified ciphertexts without error). An attacker might prepend these bytes with the goal of triggering memory corruption issues.
Related
osv
osv
CVE-2020-14967
2020-06-22 12:15:10
RSA PKCS#1 decryption vulnerability with prepending zeros in jsrsasign
2020-06-26 16:27:08
cve
cve
CVE-2020-14967
2020-06-22 12:15:10
veracode
veracode
Insecure RSA Signature Validation
2020-06-23 03:45:44
cvelist
cvelist
CVE-2020-14967
2020-06-22 11:19:35
nvd
nvd
CVE-2020-14967
2020-06-22 12:15:10
github
github
RSA PKCS#1 decryption vulnerability with prepending zeros in jsrsasign
2020-06-26 16:27:08