CVE-2022-24884: Trivial signature forgery in ecdsautils
ecdsautils is a tiny collection of programs used for ECDSA (keygen, sign, verify). ecdsaverify[prepare]legacy() does not check whether the signature values r and s are non-zero. A signature consisting only of zeroes is always considered valid, making it trivial to forge signatures. Requiring multiple signatures from different public keys does not mitigate the issue: ecdsaverifylistlegacy() will accept an arbitrary number of such forged signatures. Both the ecdsautil verify CLI command and the libecdsautil library are affected. The issue has been fixed in ecdsautils 0.4.1. All older versions of ecdsautils (including versions before the split into a library and a CLI utility) are vulnerable.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-24884?
CVE-2022-24884 has a high severity due to its potential for signature forgery.
How do I fix CVE-2022-24884?
To fix CVE-2022-24884, upgrade ecdsautils to versions 0.3.2+git20151018-2+deb10u1, 0.3.2+git20151018-2+deb11u1, or 0.4.1-3 or later.
What versions of ecdsautils are affected by CVE-2022-24884?
Affected versions of ecdsautils include 0.3.2 and any versions prior to 0.4.1.
Can I exploit CVE-2022-24884 without authentication?
Yes, CVE-2022-24884 can be exploited without authentication, making it particularly dangerous.
What platforms are impacted by CVE-2022-24884?
CVE-2022-24884 impacts Debian, Ubuntu, and Fedora distributions that use vulnerable versions of ecdsautils.