Описание
Duplicate Advisory: Consensys gnark-crypto allows Signature Malleability
Duplicate Advisory
This advisory has been withdrawn because it is a duplicate of GHSA-fr8m-434r-g3xp. This link is maintained to preserve external references.
Original Description
Consensys gnark-crypto through 0.11.2 allows Signature Malleability. This occurs because deserialisation of EdDSA and ECDSA signatures does not ensure that the data is in a certain interval.
Пакеты
Наименование
github.com/Consensys/gnark-crypto
go
Затронутые версииВерсия исправления
< 0.12.0
0.12.0
Наименование
github.com/consensys/gnark-crypto
go
Затронутые версииВерсия исправления
< 0.12.0
0.12.0
9.8 Critical
CVSS3
Дефекты
CWE-502
9.8 Critical
CVSS3
Дефекты
CWE-502