Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2020-36843

Опубликовано: 13 мар. 2025
Источник: nvd
CVSS3: 4.3
EPSS Низкий

Описание

The implementation of EdDSA in EdDSA-Java (aka ed25519-java) through 0.3.0 exhibits signature malleability and does not satisfy the SUF-CMA (Strong Existential Unforgeability under Chosen Message Attacks) property. This allows attackers to create new valid signatures different from previous signatures for a known message.

EPSS

Процентиль: 6%
0.00025
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-347

Связанные уязвимости

CVSS3: 4.3
ubuntu
11 месяцев назад

The implementation of EdDSA in EdDSA-Java (aka ed25519-java) through 0.3.0 exhibits signature malleability and does not satisfy the SUF-CMA (Strong Existential Unforgeability under Chosen Message Attacks) property. This allows attackers to create new valid signatures different from previous signatures for a known message.

CVSS3: 4.3
debian
11 месяцев назад

The implementation of EdDSA in EdDSA-Java (aka ed25519-java) through 0 ...

suse-cvrf
11 месяцев назад

Security update for ed25519-java

CVSS3: 4.3
github
11 месяцев назад

Ed25519 Signature Malleability in ed25519-java Due to Missing Scalar Range Check

EPSS

Процентиль: 6%
0.00025
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-347