230 matches found
CVE-2023-33242
CVE-2023-33242 CVE-2023-33242 PoC 模拟的Lindell17协议存在比特提取漏洞，攻击者可通过迭代提取密钥的各个比特来恢复私钥。该协议旨在通过客户端-服务器模型生成ECDSA签名，其中每一方持有ECDSA密钥的份额。漏洞在于对签名尝试过程中中止处理的错误处理，使得攻击者能够在多次迭代中提取密钥的比特。...
CVE-2022-21449-TLS-PoC
CVE-2022-21449-TLS-PoC CVE-2022-21449（在 Neil Madden 的漏洞分析文章中也被称为“Psychic Signatures”）的概念验证，演示了如何将其用于易受攻击的客户端和恶意 TLS 服务器。 恶意服务器展示了一个截至 2022-04-20 对 www.google.com 有效的证书链，该证书链带有 ECDSA 公钥（secp256r1）。但是，crypto/ecdsa 包已被修改为提供 r = s = 0 的无效签名。易受攻击的客户端接受此无效签名，从而使 TLS 握手能够继续进行。 除了在构建和探索过程中移除的 test.go...
EUVD-2026-32002
epa4all-client is the Java Client for epa4all / ePA 3.0 in the Telematik Infrastruktur. Prior to 1.2.1, in SignedPublicKeysTrustValidatorImpl.isTrusted, the ECDSA signature verification at line 45 discards the boolean return value of Signature.verify. The method performs certificate chain...
CVE-2026-44900 epa4all-client: VAU Signature bypass
epa4all-client is the Java Client for epa4all / ePA 3.0 in the Telematik Infrastruktur. Prior to 1.2.1, in SignedPublicKeysTrustValidatorImpl.isTrusted, the ECDSA signature verification at line 45 discards the boolean return value of Signature.verify. The method performs certificate chain...
UBUNTU-CVE-2026-48852
PuTTY 0.71 before 0.84 has an assertion failure in ECDSA signature verification...
CVE-2026-48852
PuTTY 0.71 before 0.84 has an assertion failure in ECDSA signature verification...
Astra Linux – Vulnerability in bind9
By spoofing the target resolver with responses that have a malformed ECDSA signature, an attacker can trigger a small memory leak. It is possible to gradually erode the available memory to the point where named crashes occur due to lack of resources...
PT-2026-39308
Name of the Vulnerable Software and Affected Versions epa4all-client affected versions not specified Description A signature bypass exists in the isTrusted function of the SignedPublicKeysTrustValidatorImpl class. The ECDSA signature verification process discards the boolean return value of the...
JLSEC-2026-214 Normally in OpenSSL EC groups always have a co-factor present and this is used in side channel...
Normally in OpenSSL EC groups always have a co-factor present and this is used in side channel resistant code paths. However, in some cases, it is possible to construct a group using explicit parameters instead of using a named curve. In those cases it is possible that such a group does not have...
EulerOS Virtualization 2.10.1 : openssl (EulerOS-SA-2026-1136)
According to the versions of the openssl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bound...
CVE-2018-12434
LibreSSL before 2.6.5 and 2.7.x before 2.7.4 allows a memory-cache side-channel attack on DSA and ECDSA signatures, aka the Return Of the Hidden Number Problem or ROHNP. To discover a key, the attacker needs access to either the local machine or a different virtual machine on the same physical ho...
CVE-2019-18222
The ECDSA signature implementation in ecdsa.c in Arm Mbed Crypto 2.1 and Mbed TLS through 2.19.1 does not reduce the blinded scalar before computing the inverse, which allows a local attacker to recover the private key via side-channel attacks...
EUVD-2013-2883
Malware in sbrugna...
EUVD-2020-4713
Malware in sbrugna...
EUVD-2019-6727
Malware in sbrugna...
EUVD-2019-8022
Malware in sbrugna...
EUVD-2015-2820
Malware in sbrugna...
EUVD-2020-6103
Malware in sbrugna...