CVE-2021-43569

The verify function in the Stark Bank .NET ECDSA library ecdsa-dotnet 1.3.1 fails to check that the signature is non-zero, which allows attackers to forge signatures on arbitrary messages...

CVE-2021-43571

The verify function in the Stark Bank Node.js ECDSA library ecdsa-node 1.1.2 fails to check that the signature is non-zero, which allows attackers to forge signatures on arbitrary messages...

CVE-2021-43571

The verify function in the Stark Bank Node.js ECDSA library ecdsa-node 1.1.2 fails to check that the signature is non-zero, which allows attackers to forge signatures on arbitrary messages...

Design/Logic Flaw

The verify function in the Stark Bank .NET ECDSA library ecdsa-dotnet 1.3.1 fails to check that the signature is non-zero, which allows attackers to forge signatures on arbitrary messages...

Design/Logic Flaw

The verify function in the Stark Bank Elixir ECDSA library ecdsa-elixir 1.0.0 fails to check that the signature is non-zero, which allows attackers to forge signatures on arbitrary messages...

PYSEC-2021-426

The verify function in the Stark Bank Python ECDSA library ecdsa-python 2.0.0 fails to check that the signature is non-zero, which allows attackers to forge signatures on arbitrary messages...

CVE-2021-43571

The verify function in the Stark Bank Node.js ECDSA library ecdsa-node 1.1.2 fails to check that the signature is non-zero, which allows attackers to forge signatures on arbitrary messages...

Design/Logic Flaw

The verify function in the Stark Bank Python ECDSA library aka starkbank-escada or ecdsa-python before 2.0.1 fails to check that the signature is non-zero, which allows attackers to forge signatures on arbitrary messages...

Design/Logic Flaw

The verify function in the Stark Bank Node.js ECDSA library ecdsa-node 1.1.2 fails to check that the signature is non-zero, which allows attackers to forge signatures on arbitrary messages...

CVE-2021-43568

The verify function in the Stark Bank Elixir ECDSA library ecdsa-elixir 1.0.0 fails to check that the signature is non-zero, which allows attackers to forge signatures on arbitrary messages...

CVE-2021-43568

CVE-2021-43568 affects Stark Bank’s ecdsa-elixir library (version 1.0.0), where verify fails to enforce non-zero r and s, enabling signature forgery on arbitrary messages. Public advisories (GHSA-xx36-6rv4-gj8r, OSV, CNVD, CNVD- etc.) describe the issue and recommend upgrading to ecdsa-elixir v1....

CVE-2021-43570

The verify function in the Stark Bank Java ECDSA library ecdsa-java 1.0.0 fails to check that the signature is non-zero, which allows attackers to forge signatures on arbitrary messages...

CVE-2021-43570

The CVE-2021-43570 issue affects Stark Bank’s Java ECDSA library (ecdsa-java) 1.0.0. The verify() function fails to enforce a non‑zero signature, enabling forgery of signatures on arbitrary messages. This vulnerability has a high/critical impact (CVSS 3.1: 9.8) with network attack exposure and re...

CVE-2021-43571

The verify function in the Stark Bank Node.js ECDSA library ecdsa-node 1.1.2 fails to check that the signature is non-zero, which allows attackers to forge signatures on arbitrary messages...

CVE-2021-43571

The CVE-2021-43571 entry concerns Stark Bank’s Node.js ECDSA library (ecdsa-node) 1.1.2. The vulnerability stems from the verify function not checking that the signature is non-zero, which enables forging signatures on arbitrary messages. Reported impact indicates potential for signature forgery ...

CVE-2021-43572

The CVE-2021-43572 entry documents a vulnerability in the Stark Bank Python ECDSA library (starkbank-escada/ecdsa-python) where the verify function before version 2.0.1 fails to ensure signatures are non-zero, allowing an attacker to forge signatures on arbitrary messages. Affected software: Star...

CVE-2021-43572

The verify function in the Stark Bank Python ECDSA library aka starkbank-escada or ecdsa-python before 2.0.1 fails to check that the signature is non-zero, which allows attackers to forge signatures on arbitrary messages...

CVE-2021-43569

The CVE-2021-43569 vulnerability affects Stark Bank’s .NET ECDSA library (ecdsa-dotnet) 1.3.1, where the verify function does not reject a zero/non-nonzero signature, enabling signature forgery on arbitrary messages and potential authentication bypass. Public details confirm the issue and point t...

CVE-2021-43569

The verify function in the Stark Bank .NET ECDSA library ecdsa-dotnet 1.3.1 fails to check that the signature is non-zero, which allows attackers to forge signatures on arbitrary messages...

golang: crypto/tls: certificate of wrong type is causing TLS client to panic

A flaw was found in golang. A panic can be triggered by an attacker in a privileged network position without access to the server certificate's private key, as long as a trusted ECDSA or Ed25519 certificate for the server exists or can be issued, or the client is configured with...