VDB
BDU%3A2024-00774
BDU%3A2024-00774
PUBLISHED
CVSS 7.5 HIGH
Уязвимость реализации стандарта PKCS#1 v1.5 криптографической библиотеки jsrsasign, позволяющая нарушителю реализовать атаку Блейхенбахера (Bleichenbacher) или атаку Марвина (Marvin)
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:L/E:P
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Сообщество свободного программного обеспечения | jsrsasign | |
| n/a | org.webjars.bower:jsrsasign | 0 |
| n/a | org.webjars.bowergithub.kjur:jsrsasign | 0 |
| n/a | org.webjars.npm:jsrsasign | 0 |
| n/a | jsrsasign | 0 |
Timeline
- Jan 22, 2024 CVE Published
- Jan 22, 2024 PoC Published
- Jan 22, 2024 PoC Published
- Jan 30, 2024 CVE Updated
- Feb 16, 2024 PoC Published
References
- https://access.redhat.com/security/cve/cve-2024-21484 url
- https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-6070732 url
- https://people.redhat.com/~hkario/marvin/ url
- https://github.com/kjur/jsrsasign/issues/598 url
- https://vuldb.com/ru/?id.251681 url
- https://security.snyk.io/vuln/SNYK-JS-JSRSASIGN-6070731 url
- https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-6070734 url
- https://github.com/kjur/jsrsasign/security/advisories/GHSA-rh63-9qcf-83gf url
- https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBKJUR-6070733 url
- https://kjur.github.io/jsrsasign/ url
- https://github.com/kjur/jsrsasign/releases/tag/11.0.0 advisory