PT-2024-29954

🗓️ 02 Aug 2024 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 9 Views

Elliptic package 6.5.6 is vulnerable to EDDSA signature malleability, patch urgently to secure it.

Reporter	Title	Published	Views	Family All 1552
OSV	CGA-XG2F-C775-JPGF	21 Dec 202404:08	–	osv
OSV	CGA-XJH6-7MFX-4RMJ	6 Jun 202412:30	–	osv
OSV	CGA-XM7H-XF4J-RX82	21 Dec 202400:08	–	osv
OSV	CGA-XM88-M8C9-HMRG	20 Dec 202423:08	–	osv
OSV	CGA-XM8J-QXPF-3FXC	20 Dec 202423:08	–	osv
OSV	CGA-XWJV-J2M3-P4CV	3 Jan 202520:08	–	osv
OSV	CGA-XX69-98PG-JXM9	20 Dec 202423:08	–	osv
OSV	CLEANSTART-2026-EJ93145 attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames	7 Apr 202600:44	–	osv
OSV	CLEANSTART-2026-HZ73294 Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial of service	9 Apr 202600:45	–	osv
OSV	CLEANSTART-2026-RF96040 Security fixes for CVE-2023-45288, CVE-2023-48795, CVE-2024-24786, CVE-2024-45337, CVE-2024-45338, CVE-2025-22868, CVE-2025-22869, CVE-2025-22870, CVE-2025-22872, CVE-2025-47911, CVE-2025-47913, CVE-2025-47914, CVE-2025-58181, CVE-2025-58190, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27140, CVE-2026-27143, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39821, CVE-2026-39823, CVE-2026-39824, CVE-2026-39825, CVE-2026-39826, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, CVE-2026-42502, CVE-2026-42506, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598 applied in versions: 2.10.1-r0, 2.10.1-r1, 2.10.1-r2	13 Jul 202608:02	–	osv

Source	Link
osv	www.osv.dev/vulnerability/openSUSE-SU-2025:14663-1
osv	www.osv.dev/vulnerability/UBUNTU-CVE-2024-42459
github	www.github.com/indutny/elliptic/commit/accb61e9c1a005e5c8ff96a8b33893100bb42d11
suse	www.suse.com/security/cve/CVE-2024-21538
lists	www.lists.opensuse.org/archives/list/[email protected]/thread/IL7QOYRPFRGRS6UKU6ZYHI76FWFFUJNK
suse	www.suse.com/security/cve/CVE-2024-4068
suse	www.suse.com/security/cve/CVE-2024-51744
t	www.t.me/cvedetector/2332
osv	www.osv.dev/vulnerability/AZL-47421
suse	www.suse.com/security/cve/CVE-2024-48948

26 Apr 2026 00:00Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.15.3 - 8.2

CVSS 48.7

EPSS0.01429

SSVC