PT-2020-14094 · Jsrsasign · Jsrsasign

Published 2020-06-22 · Updated 2023-01-28 · CVE-2020-14967

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions jsrsasign versions prior to 8.0.18

Description The issue concerns the RSA PKCS1 v1.5 decryption implementation in the jsrsasign package. It fails to detect ciphertext modification when '0' bytes are prepended to ciphertexts, allowing it to decrypt modified ciphertexts without error. This could potentially be exploited by an attacker to trigger memory corruption issues by prepending these bytes.

Recommendations For versions prior to 8.0.18, update to version 8.0.18 or later to resolve the issue.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2020-14967

GHSA-XXXQ-CHMP-67G4

Affected Products

Jsrsasign

References · 14

• 🔥 https://github.com/kjur/jsrsasign/issues/439 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-14967 · Security Note
• https://osv.dev/vulnerability/CVE-2020-14967 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-xxxq-chmp-67g4 · Vendor Advisory
• https://github.com/kjur/jsrsasign · Note
• https://github.com/kjur/jsrsasign/releases/tag/8.0.17 · Note
• https://github.com/kjur/jsrsasign/releases/tag/8.0.18 · Note
• https://github.com/kjur/jsrsasign/security/advisories/GHSA-xxxq-chmp-67g4 · Note
• https://security.netapp.com/advisory/ntap-20200724-0001 · Note
• https://kjur.github.io/jsrsasign · Note
• https://kjur.github.io/jsrsasign/api/symbols/KJUR.crypto.Cipher.html#.decrypt · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14967 · Note
• https://vuldb.com/?id.157124 · Note
• https://npmjs.com/package/jsrsasign · Note