Lucene search
K

12 matches found

Github Security Blog
Github Security Blog
added 2024/08/02 9:31 a.m.22 views

Elliptic's EDDSA missing signature length check

In the Elliptic package 6.5.6 for Node.js, EDDSA signature malleability occurs because there is a missing signature length check, and thus zero-valued bytes can be removed or appended...

5.3CVSS7.1AI score0.00131EPSS
Exploits1References6Affected Software1
OSV
OSV
added 2024/08/02 9:31 a.m.0 views

GHSA-F7Q4-PWC6-W24P Elliptic's EDDSA missing signature length check

In the Elliptic package 6.5.6 for Node.js, EDDSA signature malleability occurs because there is a missing signature length check, and thus zero-valued bytes can be removed or appended...

6.9CVSS6.7AI score0.00131EPSS
Exploits1References6
OSV
OSV
added 2024/08/02 7:16 a.m.1 views

DEBIAN-CVE-2024-42459

In the Elliptic package 6.5.6 for Node.js, EDDSA signature malleability occurs because there is a missing signature length check, and thus zero-valued bytes can be removed or appended...

5.3CVSS6.7AI score0.00131EPSS
Exploits1References1
Cvelist
Cvelist
added 2024/08/02 12:0 a.m.19 views

CVE-2024-42459

In the Elliptic package 6.5.6 for Node.js, EDDSA signature malleability occurs because there is a missing signature length check, and thus zero-valued bytes can be removed or appended...

0.00131EPSS
Exploits1References1
UbuntuCve
UbuntuCve
added 2024/08/02 12:0 a.m.13 views

CVE-2024-42459

In the Elliptic package 6.5.6 for Node.js, EDDSA signature malleability occurs because there is a missing signature length check, and thus zero-valued bytes can be removed or appended...

5.3CVSS6.7AI score0.00131EPSS
Exploits1References2
OSV
OSV
added 2023/11/24 7:15 p.m.2 views

ALPINE-CVE-2023-49298

OpenZFS through 2.1.13 and 2.2.x through 2.2.1, in certain scenarios involving applications that try to rely on efficient copying of file data, can replace file contents with zero-valued bytes and thus potentially disable security mechanisms. NOTE: this issue is not always security related, but c...

7.5CVSS6.6AI score0.00656EPSS
Exploits1References1
OSV
OSV
added 2023/11/24 7:15 p.m.21 views

CVE-2023-49298

OpenZFS through 2.1.13 and 2.2.x through 2.2.1, in certain scenarios involving applications that try to rely on efficient copying of file data, can replace file contents with zero-valued bytes and thus potentially disable security mechanisms. NOTE: this issue is not always security related, but c...

7.5CVSS6.5AI score
Exploits0References12
UbuntuCve
UbuntuCve
added 2023/11/24 7:15 p.m.18 views

CVE-2023-49298

OpenZFS through 2.1.13 and 2.2.x through 2.2.1, in certain scenarios involving applications that try to rely on efficient copying of file data, can replace file contents with zero-valued bytes and thus potentially disable security mechanisms. NOTE: this issue is not always security related, but c...

7.5CVSS7AI score0.00656EPSS
Exploits1References5
Prion
Prion
added 2023/11/24 7:15 p.m.24 views

Default configuration

OpenZFS through 2.1.13 and 2.2.x through 2.2.1, in certain scenarios involving applications that try to rely on efficient copying of file data, can replace file contents with zero-valued bytes and thus potentially disable security mechanisms. NOTE: this issue is not always security related, but c...

5CVSS6.7AI score0.00656EPSS
Exploits1References10Affected Software1
Debian CVE
Debian CVE
added 2023/11/24 12:0 a.m.41 views

CVE-2023-49298

OpenZFS through 2.1.13 and 2.2.x through 2.2.1, in certain scenarios involving applications that try to rely on efficient copying of file data, can replace file contents with zero-valued bytes and thus potentially disable security mechanisms. NOTE: this issue is not always security related, but c...

7.5CVSS6.8AI score0.00656EPSS
Exploits1
Vulnrichment
Vulnrichment
added 2023/11/24 12:0 a.m.23 views

CVE-2023-49298

OpenZFS through 2.1.13 and 2.2.x through 2.2.1, in certain scenarios involving applications that try to rely on efficient copying of file data, can replace file contents with zero-valued bytes and thus potentially disable security mechanisms. NOTE: this issue is not always security related, but c...

6.4AI score0.00656EPSS
Exploits1References11
Cvelist
Cvelist
added 2023/11/24 12:0 a.m.25 views

CVE-2023-49298

OpenZFS through 2.1.13 and 2.2.x through 2.2.1, in certain scenarios involving applications that try to rely on efficient copying of file data, can replace file contents with zero-valued bytes and thus potentially disable security mechanisms. NOTE: this issue is not always security related, but c...

7.4AI score0.00656EPSS
Exploits1References11
Rows per page
Query Builder