CVE-2022-24884

Description

ecdsautils is a tiny collection of programs used for ECDSA (keygen, sign, verify). ecdsa_verify_[prepare_]legacy() does not check whether the signature values r and s are non-zero. A signature consisting only of zeroes is always considered valid, making it trivial to forge signatures. Requiring multiple signatures from different public keys does not mitigate the issue: ecdsa_verify_list_legacy() will accept an arbitrary number of such forged signatures. Both the ecdsautil verify CLI command and the libecdsautil library are affected. The issue has been fixed in ecdsautils 0.4.1. All older versions of ecdsautils (including versions before the split into a library and a CLI utility) are vulnerable.

Risk Information

Base Score

7.5

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS Score

Exploitation Probability

0.124

Associated Vulnerability

Vulnerability	OS Platform
ecdsautils security update(DSA-5132-1) ecdsautils_0.3.2+git20151018-2+deb10u1_i386.deb	Linux
ecdsautils security update(DSA-5132-1) ecdsautils_0.3.2+git20151018-2+deb10u1_amd64.deb	Linux
ecdsautils security update(DSA-5132-1) ecdsautils_0.3.2+git20151018-2+deb11u1_amd64.deb	Linux
ecdsautils security update(DSA-5132-1) ecdsautils_0.3.2+git20151018-2+deb11u1_i386.deb	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234