Improper Verification of Cryptographic Signature in fastecdsa

高 7.5CVE-2020-12607 · GHSA-56wv-2wr9-3h9r · PYSEC-2020-42 · 02/06/2020 公開 · 17/06/2026 更新

要点

CVE-2020-12607 は fastecdsa, fastecdsa (antonkueltz) に影響する深刻度「高」 (CVSS 7.5) の脆弱性です。
今後30日間に悪用される確率（EPSS）：1.3%（全脆弱性の 70.8% より高い）。
対処：2.1.2 以降に更新してください。

パッケージ	影響を受けるバージョン	修正済みバージョン
fastecdsa PyPI	`< 2.1.2`	`2.1.2`
fastecdsa antonkueltz	`< 2.1.2`	`2.1.2`

概要

An issue was discovered in fastecdsa before 2.1.2. When using the NIST P-256 curve in the ECDSA implementation, the point at infinity is mishandled. This means that for an extreme value in k and s<sup>-1</sup>, the signature verification fails even if the signature is correct. This behavior is not solely a usability problem. There are some threat models where an attacker can benefit by successfully guessing users for whom signature verification will fail.

NVD の説明

An issue was discovered in fastecdsa before 2.1.2. When using the NIST P-256 curve in the ECDSA implementation, the point at infinity is mishandled. This means that for an extreme value in k and s^-1, the signature verification fails even if the signature is correct. This behavior is not solely a usability problem. There are some threat models where an attacker can benefit by successfully guessing users for whom signature verification will fail.

参考情報

nvd.nist.gov/vuln/detail/CVE-2020-12607 · ADVISORY
AntonKueltz/fastecdsa · WEB
AntonKueltz/fastecdsa commit 4a16dae · WEB
AntonKueltz/fastecdsa commit 7b64e3e · WEB
AntonKueltz/fastecdsa commit e592f10 · WEB
AntonKueltz/fastecdsa · PACKAGE
GitHub Advisory GHSA-56wv-2wr9-3h9r · ADVISORY
pypa/advisory-database · WEB

fastecdsa のその他の脆弱性

すべて見る →

これらの製品をお使いですか？サイトをスキャンして、脆弱なバージョンが公開されていないか確認しましょう。

無料でサイトをスキャン

パッケージ

影響を受けるバージョン

修正済みバージョン

fastecdsa

PyPI

< 2.1.2

2.1.2

fastecdsa

antonkueltz

< 2.1.2

2.1.2

概要

NVD の説明

An issue was discovered in fastecdsa before 2.1.2. When using the NIST P-256 curve in the ECDSA implementation, the point at infinity is mishandled. This means that for an extreme value in k and s^-1, the signature verification fails even if the signature is correct. This behavior is not solely a usability problem. There are some threat models where an attacker can benefit by successfully guessing users for whom signature verification will fail.