Vulnetix
Try Vulnetix Request Demo
CVE-2020-36843 PUBLISHED

The implementation of EdDSA in EdDSA-Java (aka ed25519-java) through 0.3.0 exhibits signature malleability and does not satisfy the SUF-CMA (Strong Existential Unforgeability under Chosen Message Attacks) property. This allows attackers to create new valid signatures different from previous signatures for a known message.

EPSS 0.03% · 6.9th percentile

Risk Scores

EPSS Score
0.03%
6.9th percentile

Affected Products

VendorProductVersions
Ubuntu:22.04:LTSruby-ed255191.2.4-2, 1.3.0+ds-1, 1.2.4-2build1
Ubuntu:25.10ruby-ed255190, 1.4.0+ds-1, 1.3.0+ds-1build5
Ubuntu:25.10libeddsa-java0.3.0-2.1, 0.3.0-2, 0
Ubuntu:20.04:LTSruby-ed255190, 1.2.4-1, 1.2.4-1build1
Ubuntu:24.04:LTSruby-ed255191.3.0+ds-1build4, 1.3.0+ds-1build3, 1.3.0+ds-1build2

Timeline

References

Open in Interactive Console →