Lucene search
+L

13 matches found

OSV
OSV
•added 2024/08/02 9:31 a.m.•24 views

GHSA-F7Q4-PWC6-W24P Elliptic's EDDSA missing signature length check

In the Elliptic package 6.5.6 for Node.js, EDDSA signature malleability occurs because there is a missing signature length check, and thus zero-valued bytes can be removed or appended...

6.9CVSS6.7AI score0.00302EPSS
SaveExploits1References6
Github Security Blog
Github Security Blog
•added 2024/08/02 9:31 a.m.•33 views

Elliptic's EDDSA missing signature length check

In the Elliptic package 6.5.6 for Node.js, EDDSA signature malleability occurs because there is a missing signature length check, and thus zero-valued bytes can be removed or appended...

7.1AI score0.00302EPSS
SaveExploits1References6Affected Software1
OSV
OSV
•added 2024/08/02 7:16 a.m.•8 views

DEBIAN-CVE-2024-42459

In the Elliptic package 6.5.6 for Node.js, EDDSA signature malleability occurs because there is a missing signature length check, and thus zero-valued bytes can be removed or appended...

5.3CVSS6.7AI score0.00302EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/08/02 12:00 a.m.•37 views

CVE-2024-42459

In the Elliptic package 6.5.6 for Node.js, EDDSA signature malleability occurs because there is a missing signature length check, and thus zero-valued bytes can be removed or appended...

0.00302EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
•added 2024/08/02 12:00 a.m.•26 views

CVE-2024-42459

In the Elliptic package 6.5.6 for Node.js, EDDSA signature malleability occurs because there is a missing signature length check, and thus zero-valued bytes can be removed or appended...

5.3CVSS6.7AI score0.00302EPSS
SaveExploits1References2
OSV
OSV
•added 2023/11/24 7:15 p.m.•14 views

ALPINE-CVE-2023-49298

OpenZFS through 2.1.13 and 2.2.x through 2.2.1, in certain scenarios involving applications that try to rely on efficient copying of file data, can replace file contents with zero-valued bytes and thus potentially disable security mechanisms. NOTE: this issue is not always security related, but c...

7.5CVSS6.6AI score0.01158EPSS
SaveExploits1References1
Prion
Prion
•added 2023/11/24 7:15 p.m.•38 views

Default configuration

OpenZFS through 2.1.13 and 2.2.x through 2.2.1, in certain scenarios involving applications that try to rely on efficient copying of file data, can replace file contents with zero-valued bytes and thus potentially disable security mechanisms. NOTE: this issue is not always security related, but c...

5CVSS6.7AI score0.01158EPSS
SaveExploits1References10Affected Software1
UbuntuCve
UbuntuCve
•added 2023/11/24 7:15 p.m.•34 views

CVE-2023-49298

OpenZFS through 2.1.13 and 2.2.x through 2.2.1, in certain scenarios involving applications that try to rely on efficient copying of file data, can replace file contents with zero-valued bytes and thus potentially disable security mechanisms. NOTE: this issue is not always security related, but c...

7.5CVSS7AI score0.01158EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2023/11/24 12:00 a.m.•24 views

CVE-2023-49298

OpenZFS through 2.1.13 and 2.2.x through 2.2.1, in certain scenarios involving applications that try to rely on efficient copying of file data, can replace file contents with zero-valued bytes and thus potentially disable security mechanisms. NOTE: this issue is not always security related, but c...

6.4AI score0.01158EPSS
SaveExploits1References11
OSV
OSV
•added 2023/11/24 12:00 a.m.•38 views

CVE-2023-49298

OpenZFS through 2.1.13 and 2.2.x through 2.2.1, in certain scenarios involving applications that try to rely on efficient copying of file data, can replace file contents with zero-valued bytes and thus potentially disable security mechanisms. NOTE: this issue is not always security related, but c...

7.5CVSS6.5AI score
SaveExploits0References14
Debian CVE
Debian CVE
•added 2023/11/24 12:00 a.m.•99 views

CVE-2023-49298

OpenZFS through 2.1.13 and 2.2.x through 2.2.1, in certain scenarios involving applications that try to rely on efficient copying of file data, can replace file contents with zero-valued bytes and thus potentially disable security mechanisms. NOTE: this issue is not always security related, but c...

7.5CVSS6.8AI score0.01158EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/24 12:00 a.m.•1 views

CVE-2023-49298: Authorization Bypass Through User-Controlled Key

OpenZFS through 2.1.13 and 2.2.x through 2.2.1, in certain scenarios involving applications that try to rely on efficient copying of file data, can replace file contents with zero-valued bytes and thus potentially disable security mechanisms. NOTE: this issue is not always security related, but c...

7.5CVSS7.2AI score0.01158EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2023/11/24 12:00 a.m.•60 views

CVE-2023-49298

OpenZFS through 2.1.13 and 2.2.x through 2.2.1, in certain scenarios involving applications that try to rely on efficient copying of file data, can replace file contents with zero-valued bytes and thus potentially disable security mechanisms. NOTE: this issue is not always security related, but c...

7.4AI score0.01158EPSS
SaveExploits1References11
Rows per page
Query Builder