Non évaluée
An issue was discovered in the libsecp256k1 crate before 0.5.0 for Rust. It can verify an invalid signature because it allows the R or S parameter to...
CVE-2021-38195
Première détection SecPulse
Description d'origine La description telle que publiée par la source (souvent en anglais).
An issue was discovered in the libsecp256k1 crate before 0.5.0 for Rust. It can verify an invalid signature because it allows the R or S parameter to be larger than the curve order, aka an overflow.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory raw.githubusercontent.com
- patch rustsec.org