Security Bulletin: Security Vulnerability in EdDSA-Java affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2020-36843)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed vulnerability due to EdDSA-Java's implementation of the cryptographic algorithm. Vulnerability Details CVEID:CVE-2020-36843 DESCRIPTION: The implementation of EdDSA in EdDSA-Java aka ed25519-java through 0.3.0 exhibi...

Linux Distros Unpatched Vulnerability : CVE-2020-36843

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The implementation of EdDSA in EdDSA-Java aka ed25519-java through 0.3.0 exhibits signature malleability and does not satisfy the SUF-CMA Strong Existential...

EdDSA implementation in eddsa-api exhibits signature malleability

eddsa-api makes the EdDSA-Java library ed25519-java available to other plugins. eddsa-api 0.3.0-13.v7cb69ed68f00 and earlier bundles version 0.3.0 of EdDSA-Java, which exhibits signature malleability and does not satisfy the SUF-CMA Strong Existential Unforgeability under Chosen Message Attacks...

Jenkins plugins Multiple Vulnerabilities (2025-03-19)

According to their self-reported version numbers, the version of Jenkins plugins running on the remote web server are affected by multiple vulnerabilities: - The implementation of EdDSA in EdDSA-Java aka ed25519-java through 0.3.0 exhibits signature malleability and does not satisfy the SUF-CMA...

CVE-2020-36843

A flaw was found in EdDSA-Java ed25519-java. This vulnerability allows attackers to create new valid signatures different from previous signatures for a known message via signature malleability, violating the Strong Existential Unforgeability under Chosen Message Attacks SUF-CMA property...

CVE-2020-36843

The implementation of EdDSA in EdDSA-Java aka ed25519-java through 0.3.0 exhibits signature malleability and does not satisfy the SUF-CMA Strong Existential Unforgeability under Chosen Message Attacks property. This allows attackers to create new valid signatures different from previous signature...

CVE-2020-36843

The implementation of EdDSA in EdDSA-Java aka ed25519-java through 0.3.0 exhibits signature malleability and does not satisfy the SUF-CMA Strong Existential Unforgeability under Chosen Message Attacks property. This allows attackers to create new valid signatures different from previous signature...

DEBIAN-CVE-2020-36843

The implementation of EdDSA in EdDSA-Java aka ed25519-java through 0.3.0 exhibits signature malleability and does not satisfy the SUF-CMA Strong Existential Unforgeability under Chosen Message Attacks property. This allows attackers to create new valid signatures different from previous signature...

CVE-2020-36843

The implementation of EdDSA in EdDSA-Java aka ed25519-java through 0.3.0 exhibits signature malleability and does not satisfy the SUF-CMA Strong Existential Unforgeability under Chosen Message Attacks property. This allows attackers to create new valid signatures different from previous signature...

EdDSA-Java 安全漏洞

EdDSA-Java is a pure Java implementation of EdDSA by the individual developer Jack Grigg. A security vulnerability exists in EdDSA-Java 0.3.0 and prior versions that stems from signature malleability that does not satisfy the SUF-CMA property, which could lead an attacker to create a new valid...

CVE-2020-36843

The implementation of EdDSA in EdDSA-Java aka ed25519-java through 0.3.0 exhibits signature malleability and does not satisfy the SUF-CMA Strong Existential Unforgeability under Chosen Message Attacks property. This allows attackers to create new valid signatures different from previous signature...

CVE-2020-36843: Improper Verification of Cryptographic Signature

The implementation of EdDSA in EdDSA-Java aka ed25519-java through 0.3.0 exhibits signature malleability and does not satisfy the SUF-CMA Strong Existential Unforgeability under Chosen Message Attacks property. This allows attackers to create new valid signatures different from previous signature...

PT-2025-11144

Name of the Vulnerable Software and Affected Versions: EdDSA-Java aka ed25519-java versions 0.3.0 and earlier Description: The implementation of EdDSA in EdDSA-Java exhibits signature malleability and does not satisfy the SUF-CMA property. This allows attackers to create new valid signatures...