PT-2019-19397 · Openpgp · Openpgp.Js

Wolfgang Ettlinger · Published 2019-08-22 · Updated 2019-08-30 · CVE-2019-9153

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions openpgp versions prior to 4.2.0

Description The issue allows an attacker to forge signed messages by replacing their signatures with a "standalone" or "timestamp" signature. This is due to the improper verification of a cryptographic signature in OpenPGP.js. An attacker can construct a message with a signature type that only verifies subpackets without additional input, such as standalone or timestamp, allowing them to create arbitrary signed messages that would be verified correctly.

Recommendations Upgrade to version 4.2.0 or later. If you are upgrading from a version <4.0.0, read the High-Level API Changes section of the openpgp 4.0.0 release to ensure a smooth transition.

Exploit

Fix

Improper Verification of Cryptographic Signature

Weakness Enumeration

CWE-347

Related Identifiers

CVE-2019-9153

GHSA-QWQC-28W3-FWW6

Affected Products

Openpgp.Js

References · 11

• 🔥 https://sec-consult.com/en/blog/advisories/multiple-vulnerabilities-in-openpgp-js · Exploit
• https://github.com/openpgpjs/openpgpjs/pull/797/commits/327d3e5392a6f59a4270569d200c7f7a2bfc4cbc · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2019-9153 · Security Note
• https://osv.dev/vulnerability/CVE-2019-9153 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-qwqc-28w3-fww6 · Vendor Advisory
• https://github.com/openpgpjs/openpgpjs/pull/816 · Note
• https://github.com/openpgpjs/openpgpjs/releases/tag/v4.2.0 · Note
• https://snyk.io/vuln/SNYK-JS-OPENPGP-460248 · Note
• http://packetstormsecurity.com/files/154191/OpenPGP.js-4.2.0-Signature-Bypass-Invalid-Curve-Attack.html · Note
• https://bsi.bund.de/SharedDocs/Downloads/EN/BSI/Publications/Studies/Mailvelope_Extensions/Mailvelope_Extensions_pdf.html#download=1 · Note
• https://npmjs.com/advisories/1160 · Note