CVE-2020-13822

The Elliptic package 6.5.2 for Node.js allows ECDSA signature malleability via variations in encoding, leading '\0' bytes, or integer overflows

published June 4, 2020

CVSS
—
EPSS
3%
Percentile
85.8
In the wild
Unconfirmed
What it is

The Elliptic package 6.5.2 for Node.js allows ECDSA signature malleability via variations in encoding, leading '\0' bytes, or integer overflows. This could conceivably have a security-relevant impact if an application relied on a single canonical signature.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02695 · 85.8th percentile
Published
2020-06-04T14:01Z
EPSS history
Timeline
  • 04 JUN 14:01Z
    The Elliptic package 6.5.2 for Node.js allows ECDSA signature malleability via variations in encoding, leading '\0' bytes, or integer overflows
    cvelistv5