Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2020-13822 →
DEBIAN-CVE-2020-13822
The Elliptic package 6.5.2 for Node.js allows ECDSA signature malleability via variations in encoding, leading '\0' bytes, or integer overflows. This...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
The Elliptic package 6.5.2 for Node.js allows ECDSA signature malleability via variations in encoding, leading '\0' bytes, or integer overflows. This could conceivably have a security-relevant impact if an application relied on a single canonical signature.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
node-elliptic
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.5.3~dfsg-1"}]}]
Debian:13
node-elliptic
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.5.3~dfsg-1"}]}]
Debian:14
node-elliptic
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.5.3~dfsg-1"}]}]
Références
- advisory security-tracker.debian.org