CVE-2020-13822
CVE-2020-13822
This page contains facts from public vulnerability sources. Check the original advisory before updating.
The Elliptic package 6.5.2 for Node.js allows ECDSA signature malleability via variations in encoding, leading '\0' bytes, or integer overflows. This could conceivably have a security-relevant impact if an application relied on a single canonical signature.
CVSS 7.7 · High · EPSS 2.7% · Fix available
- Published
- Updated
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
node-elliptic Debian:12
- Affected ranges
- ECOSYSTEM: < 6.5.3~dfsg-1
Update to 6.5.3~dfsg-1
node-elliptic Debian:13
- Affected ranges
- ECOSYSTEM: < 6.5.3~dfsg-1
Update to 6.5.3~dfsg-1
node-elliptic Debian:14
- Affected ranges
- ECOSYSTEM: < 6.5.3~dfsg-1
Update to 6.5.3~dfsg-1
elliptic npm
- Affected ranges
- SEMVER: < 6.5.3
Update to 6.5.3
node-elliptic Ubuntu:18.04:LTS
- Versions
- 6.4.0+dfsg-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
node-elliptic Ubuntu:20.04:LTS
- Versions
- 6.5.1~dfsg-1
- 6.5.1~dfsg-2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published