Описание
Versions of the package sjcl before 1.0.9 are vulnerable to Improper Verification of Cryptographic Signature due to missing point-on-curve validation in sjcl.ecc.basicKey.publicKey(). An attacker can recover a victim's ECDH private key by sending crafted off-curve public keys and observing ECDH outputs. The dhJavaEc() function directly returns the raw x-coordinate of the scalar multiplication result (no hashing), providing a plaintext oracle without requiring any decryption feedback.
Ссылки
- ExploitMitigationThird Party Advisory
- Broken Link
- Patch
- ExploitThird Party Advisory
- ExploitMitigationThird Party Advisory
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 1.0.8 (включая)
cpe:2.3:a:bitwiseshiftleft:stanford_javascript_crypto_library:*:*:*:*:*:node.js:*:*
EPSS
Процентиль: 16%
0.00246
Низкий
7.5 High
CVSS3
Дефекты
CWE-347
CWE-325
Связанные уязвимости
CVSS3: 7.5
debian
5 месяцев назад
Versions of the package sjcl before 1.0.9 are vulnerable to Improper V ...
CVSS3: 7.5
github
5 месяцев назад
sjcl is missing point-on-curve validation in sjcl.ecc.basicKey.publicKey
EPSS
Процентиль: 16%
0.00246
Низкий
7.5 High
CVSS3
Дефекты
CWE-347
CWE-325