Description
Jsrsasign supports ECDSA signature validation which signature value is represented by ASN.1 DER encoding. This vulnerablity may accept a wrong ASN.1 DER encoded ECDSA signature such as:
- wrong multi-byte ASN.1 length of TLV (ex. 0x820045 even though 0x45 is correct)
- prepending zeros with ASN.1 INTEGER value (ex.
Recommendation
Update the jsrsasign package to the latest compatible version. Followings are version details:
- Affected version(s): >= 4.0.0, < 8.0.19
- Patched version(s): 8.0.19
References
Could your website be exposed too?
SmartScanner can check your website for ECDSA signature validation vulnerability by accepting wrong ASN.1 encoding in jsrsasign and gives you actionable findings to investigate.
Start a free scanRelated Issues
- RSA-PSS signature validation vulnerability by prepending zeros in jsrsasign - CVE-2020-14968
- RSA signature validation vulnerability on maleable encoded message in jsrsasign - CVE-2021-30246
- JWS and JWT signature validation vulnerability with special characters - CVE-2022-25898
- secp256k1-js implements ECDSA without required r and s validation, leading to signature forgery - CVE-2022-41340
You might also like:
See something that needs correcting? Let us knowUpdated January 31, 2023