mirror of
https://github.com/OMGeeky/advisory-db.git
synced 2026-02-13 21:18:11 +01:00
17 lines
474 B
TOML
17 lines
474 B
TOML
[advisory]
|
|
id = "RUSTSEC-2019-0004"
|
|
package = "libp2p-core"
|
|
date = "2019-05-15"
|
|
title = "Failure to properly verify ed25519 signatures makes any signature valid"
|
|
description = """
|
|
Affected versions of this crate did not properly verify ed25519 signatures.
|
|
Any signature with a correct length was considered valid.
|
|
|
|
This allows an attacker to impersonate any node identity.
|
|
"""
|
|
aliases = ["CVE-2019-15545"]
|
|
|
|
[versions]
|
|
patched = ["^0.7.1", ">= 0.8.1"]
|
|
unaffected = ["< 0.3"]
|