PT-2022-3495 · Unknown+2 · Ecdsautils+2
Neocturne
·
Published
2022-05-05
·
Updated
2023-07-20
·
CVE-2022-24884
CVSS v3.1
10
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
ecdsautils versions prior to 0.4.1
Description
The issue is related to the
ecdsa verify [prepare ]legacy() function, which does not check whether the signature values r and s are non-zero. This allows for trivial signature forgery, as a signature consisting only of zeroes is always considered valid. Requiring multiple signatures from different public keys does not mitigate the issue, as ecdsa verify list legacy() will accept an arbitrary number of such forged signatures. Both the ecdsautil verify CLI command and the libecdsautil library are affected.Recommendations
For versions prior to 0.4.1, update to version 0.4.1 or later to resolve the issue. As a temporary workaround, consider disabling the
ecdsa verify [prepare ]legacy() function until a patch is available. Restrict access to the ecdsautil verify CLI command and the libecdsautil library to minimize the risk of exploitation. Avoid using the ecdsa verify list legacy() function with multiple signatures from different public keys until the issue is resolved.Exploit
Fix
Improper Verification of Cryptographic Signature
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linuxmint
Ubuntu
Ecdsautils