Lucene search
+L

46 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 8:11 a.m.14 views

CVE-2019-15545

An issue was discovered in the libp2p-core crate before 0.8.1 for Rust. Attackers can spoof ed25519 signatures...

7.5CVSS6.8AI score0.00765EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
added 2025/03/13 6:30 a.m.23 views

Ed25519 Signature Malleability in ed25519-java Due to Missing Scalar Range Check

The implementation of EdDSA in EdDSA-Java aka ed25519-java through 0.3.0 exhibits signature malleability and does not satisfy the SUF-CMA Strong Existential Unforgeability under Chosen Message Attacks property. This allows attackers to create new valid signatures different from previous signature...

4.3CVSS4.6AI score0.0014EPSS
SaveExploits0References5Affected Software2
OSV
OSV
added 2025/03/13 6:15 a.m.7 views

UBUNTU-CVE-2020-36843

The implementation of EdDSA in EdDSA-Java aka ed25519-java through 0.3.0 exhibits signature malleability and does not satisfy the SUF-CMA Strong Existential Unforgeability under Chosen Message Attacks property. This allows attackers to create new valid signatures different from previous signature...

4.3CVSS7.3AI score0.0014EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2024/08/22 4:15 p.m.18 views

CVE-2024-45193

An issue was discovered in Matrix libolm through 3.2.16. There is Ed25519 signature malleability due to lack of validation criteria does not ensure that S n. This refers to the libolm implementation of Olm. NOTE: This vulnerability only affects products that are no longer supported by the...

4.3CVSS5.9AI score0.00284EPSS
SaveExploits1References5
Debian CVE
Debian CVE
added 2024/08/22 12:00 a.m.39 views

CVE-2024-45193

An issue was discovered in Matrix libolm through 3.2.16. There is Ed25519 signature malleability due to lack of validation criteria does not ensure that S n. This refers to the libolm implementation of Olm. NOTE: This vulnerability only affects products that are no longer supported by the...

4.3CVSS5.2AI score0.00284EPSS
SaveExploits1
OSV
OSV
added 2022/09/21 11:15 a.m.10 views

AZL-11002 CVE-2022-38178 affecting package bind for versions less than 9.16.33-1

By spoofing the target resolver with responses that have a malformed EdDSA signature, an attacker can trigger a small memory leak. It is possible to gradually erode available memory to the point where named crashes for lack of resources...

7.5CVSS6.7AI score0.02505EPSS
SaveExploits0References1
Rows per page
Query Builder