EUVD-2021-1561

Malware in sbrugna...

CVE-2019-15545

An issue was discovered in the libp2p-core crate before 0.8.1 for Rust. Attackers can spoof ed25519 signatures...

libp2p-dns (>=0.1.0, <=0.4.0), libp2p-floodsub (>=0.1.0, <=0.4.0) +13 more potentially affected by CVE-2019-15545 via libp2p-core (>=0.1.0, <=0.4.0)

libp2p-core CARGO version =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.4.0 Source cves: CVE-2019-15545 Source advisory: OSV:GHSA-4Q4X-67HX-5MPG...

Failure to properly verify ed25519 signatures in libp2p-core

Affected versions of this crate did not properly verify ed25519 signatures. Any signature with a correct length was considered valid. This allows an attacker to impersonate any node identity...

GHSA-4Q4X-67HX-5MPG Failure to properly verify ed25519 signatures in libp2p-core

Affected versions of this crate did not properly verify ed25519 signatures. Any signature with a correct length was considered valid. This allows an attacker to impersonate any node identity...

CVE-2019-15545

An issue was discovered in the libp2p-core crate before 0.8.1 for Rust. Attackers can spoof ed25519 signatures...

CVE-2019-15545

An issue was discovered in the libp2p-core crate before 0.8.1 for Rust. Attackers can spoof ed25519 signatures...

Design/Logic Flaw

An issue was discovered in the libp2p-core crate before 0.8.1 for Rust. Attackers can spoof ed25519 signatures...

CVE-2019-15545

An issue was discovered in the libp2p-core crate before 0.8.1 for Rust. Attackers can spoof ed25519 signatures...

CVE-2019-15545

CVE-2019-15545 affects the libp2p-core crate before 0.8.1 for Rust. The root cause is improper verification of ed25519 signatures, where any signature with a correct length could be treated as valid, allowing an attacker to impersonate any node identity. The vulnerability has multiple publicly li...

CVE-2019-15545: Improper Verification of Cryptographic Signature

An issue was discovered in the libp2p-core crate before 0.8.1 for Rust. Attackers can spoof ed25519 signatures...

libp2p-dns (>=0.3.0, <=0.4.0), libp2p-floodsub (>=0.3.0, <=0.4.0) +13 more potentially affected by CVE-2019-15545 via libp2p-core (>=0.3.4, <=0.4.0)

libp2p-core CARGO version =0.3.4, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.1.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.4.0 Source cves: CVE-2019-15545 Source advisory: OSV:RUSTSEC-2019-0004...