CVE-2024-42461

Summary

In the Elliptic package 6.5.6 for Node.js, ECDSA signature malleability occurs because BER-encoded signatures are allowed.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: yes
  • Technical Impact: partial

CVE Program Container

Additional References

• https://security.netapp.com/advisory/ntap-20241004-0005/

References

• https://github.com/indutny/elliptic/pull/317

• ←Previous
• Next→