CVE-2024-48948
EUVD-2024-303415.10.2024, 14:15
The Elliptic package 6.5.7 for Node.js, in its for ECDSA implementation, does not correctly verify valid signatures if the hash contains at least four leading 0 bytes and when the order of the elliptic curve's base point is smaller than the hash, because of an _truncateToN anomaly. This leads to valid signatures being rejected. Legitimate transactions or communications may be incorrectly flagged as invalid.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| indutny | elliptic | 6.5.7 |
𝑥
= Vulnerable software versions
Debian Releases
openSUSE / SLES Releases
openSUSE Product | |||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| aws-cli |
| ||||||||||||||||||
| pgadmin4 |
| ||||||||||||||||||
| pgadmin4-doc |
| ||||||||||||||||||
| python311-boto3 |
| ||||||||||||||||||
| python311-botocore |
| ||||||||||||||||||
| python311-coverage |
| ||||||||||||||||||
| python311-pluggy |
| ||||||||||||||||||
| python311-pytest |
| ||||||||||||||||||
| python311-pytest-cov |
| ||||||||||||||||||
| python311-pytest-mock |
| ||||||||||||||||||
| system-user-pgadmin |
|
Common Weakness Enumeration