PT-2024-33278 · Unknown · Secp256K1-Node

Chalker · Published 2024-10-21 · Updated 2024-10-28 · CVE-2024-48930

Positive Technologies (AI Summary)

CVSS v4.0

8.7

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions secp256k1-node versions prior to 5.0.1 secp256k1-node versions prior to 4.0.4 secp256k1-node versions prior to 3.8.1

Description The issue affects the elliptic-based version of secp256k1-node, where the loadCompressedPublicKey function is missing a check to ensure the public key is on the curve. This allows an attacker to use public keys on low-cardinality curves to extract enough information to fully restore the private key from as little as 11 ECDH sessions, and very cheaply on compute power. Other operations on public keys are also affected, including publicKeyVerify() incorrectly returning true on those invalid keys, and publicKeyTweakMul() also returning predictable outcomes allowing to restore the tweak.

Recommendations For versions prior to 5.0.1, update to version 5.0.1 or later. For versions prior to 4.0.4, update to version 4.0.4 or later. For versions prior to 3.8.1, update to version 3.8.1 or later. As a temporary workaround, consider disabling the loadCompressedPublicKey function until a patch is available. Restrict access to the publicKeyVerify() and publicKeyTweakMul() functions to minimize the risk of exploitation. Avoid using the publicKeyTweakMul() function with untrusted public keys until the issue is resolved.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

CWE-354

Related Identifiers

CVE-2024-48930

GHSA-584Q-6J8J-R5PM

Affected Products

Secp256K1-Node

References · 17

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/48xxx/CVE-2024-48930.json · Exploit
• https://osv.dev/vulnerability/CVE-2024-48930 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-48930 · Security Note
• https://osv.dev/vulnerability/GHSA-584q-6j8j-r5pm · Vendor Advisory
• https://github.com/cryptocoinjs/secp256k1-node/blob/6d3474b81d073cc9c8cc8cfadb580c84f8df5248/lib/elliptic.js#L37-L39 · Note
• https://github.com/cryptocoinjs/secp256k1-node/commit/8bd6446e000fa59df3cda0ae3e424300747ea5ed · Note
• https://github.com/cryptocoinjs/secp256k1-node/security/advisories/GHSA-584q-6j8j-r5pm · Note
• https://github.com/cryptocoinjs/secp256k1-node · Note
• https://github.com/cryptocoinjs/secp256k1-node/commit/9a15fff274f83a6ec7f675f1121babcc0c42292f · Note
• https://github.com/cryptocoinjs/secp256k1-node/blob/6d3474b81d073cc9c8cc8cfadb580c84f8df5248/lib/elliptic.js#L17-L19 · Note
• https://github.com/cryptocoinjs/secp256k1-node/commit/e256905ee649a7caacc251f7c964667195a52221 · Note
• https://twitter.com/CVEnew/status/1848391679704768872 · Twitter Post
• https://t.me/cvedetector/8501 · Telegram Post
• https://twitter.com/CveFindCom/status/1848394728565297268 · Twitter Post
• https://twitter.com/shoucccc/status/1848451518732681347 · Twitter Post