Astra Linux – Vulnerability in Node-Elliptic

The Elliptic package 6.5.7 for Node.js, in its ECDSA implementation, does not correctly verify valid signatures when the hash contains at least four leading 0 bytes, and when the order of the elliptic curve’s base point is smaller than the hash, due to an truncateToN anomaly. This results in vali...

The vulnerability of the _truncateToN function in the Elliptic cryptographic library of the Node.js software platform allows a hacker to execute arbitrary code.

The vulnerability of the truncateToN function in the Elliptic cryptographic library of the Node.js software platform is related to improper verification of the cryptographic signature. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...