Design/Logic Flaw

In RELIC before 2020-08-01, RSA PKCS1 v1.5 signature forgery can occur because certain checks of the padding and of the first two bytes are inadequate. NOTE: this requires that a low public exponent such as 3 is being used. The product, by default, does not generate RSA keys with such a low numbe...

Code injection

In the jsrsasign package through 10.1.13 for Node.js, some invalid RSA PKCS1 v1.5 signatures are mistakenly recognized to be valid. NOTE: there is no known practical attack...

Improper Certificate Validation in phpseclib

phpseclib before 2.0.31 and 3.x before 3.0.7 mishandles RSA PKCS1 v1.5 signature verification...

GHSA-VF4W-FG7R-5V94 Improper Certificate Validation in phpseclib

phpseclib before 2.0.31 and 3.x before 3.0.7 mishandles RSA PKCS1 v1.5 signature verification...

CVE-2021-30246

In the jsrsasign package through 10.1.13 for Node.js, some invalid RSA PKCS1 v1.5 signatures are mistakenly recognized to be valid. NOTE: there is no known practical attack...

CVE-2021-30246

CVE-2021-30246 affects the jsrsasign package (Node.js) up to version 10.1.13, where some invalid RSA PKCS#1 v1.5 signatures are mistakenly recognized as valid. The issue is described as a vulnerability in signature validation with no widely known practical attack, and patches upgrade guidance exi...

CVE-2020-36315

Summary: CVE-2020-36315 affects RELIC before 2020-08-01, allowing RSA PKCS#1 v1.5 signature forgery due to inadequate padding checks (and issues with the first two bytes). The vulnerability’s exploitation requires a low public exponent (e.g., 3), and the product defaults to not using such small e...

CVE-2020-36315

In RELIC before 2020-08-01, RSA PKCS1 v1.5 signature forgery can occur because certain checks of the padding and of the first two bytes are inadequate. NOTE: this requires that a low public exponent such as 3 is being used. The product, by default, does not generate RSA keys with such a low numbe...

Insecure Cryptographic Functions

phpseclib/phpseclib uses insecure cryptographic functions. The vulnerability exists due to a mishandled RSA PKCS1 v1.5 signature verification...

SerenityOS Buffer Overflow Vulnerability (CNVD-2021-27368)

SerenityOS is a graphical Unix-like operating system for x86 computers. A buffer overflow vulnerability exists in /Userland/Libraries/LibCrypto/ASN1/DER.h in SerenityOS. An attacker can exploit this vulnerability to obtain sensitive information by parsing the RSA key ASN.1...

CVE-2021-30130

phpseclib before 2.0.31 and 3.x before 3.0.7 mishandles RSA PKCS1 v1.5 signature verification...

CVE-2021-30130

phpseclib before 2.0.31 and 3.x before 3.0.7 mishandles RSA PKCS1 v1.5 signature verification...

CVE-2021-30130

phpseclib before 2.0.31 and 3.x before 3.0.7 mishandles RSA PKCS1 v1.5 signature verification...

Design/Logic Flaw

phpseclib before 2.0.31 and 3.x before 3.0.7 mishandles RSA PKCS1 v1.5 signature verification...

UBUNTU-CVE-2021-30130

phpseclib before 2.0.31 and 3.x before 3.0.7 mishandles RSA PKCS1 v1.5 signature verification...

CVE-2021-27343

SerenityOS Unspecified is affected by: Buffer Overflow. The impact is: obtain sensitive information context-dependent. The component is: /Userland/Libraries/LibCrypto/ASN1/DER.h Crypto::derdecodesequence function. The attack vector is: Parsing RSA Key ASN.1...

CVE-2021-27343

SerenityOS Unspecified is affected by: Buffer Overflow. The impact is: obtain sensitive information context-dependent. The component is: /Userland/Libraries/LibCrypto/ASN1/DER.h Crypto::derdecodesequence function. The attack vector is: Parsing RSA Key ASN.1...

Buffer overflow

SerenityOS Unspecified is affected by: Buffer Overflow. The impact is: obtain sensitive information context-dependent. The component is: /Userland/Libraries/LibCrypto/ASN1/DER.h Crypto::derdecodesequence function. The attack vector is: Parsing RSA Key ASN.1...

CVE-2021-27343

CVE-2021-27343 affects SerenityOS (unstructured “Unspecified” entry) in the Crypto::der_decode_sequence() function under /Userland/Libraries/LibCrypto/ASN1/DER.h. The vulnerability is a buffer overflow triggered during RSA key ASN.1 parsing, enabling potential leakage of sensitive information (co...

CVE-2021-27343

SerenityOS Unspecified is affected by: Buffer Overflow. The impact is: obtain sensitive information context-dependent. The component is: /Userland/Libraries/LibCrypto/ASN1/DER.h Crypto::derdecodesequence function. The attack vector is: Parsing RSA Key ASN.1...