ecdsautils is a tiny collection of programs used for ECDSA (keygen, sign, verify). `ecdsa_verify_[prepare_]legacy()` does not check whether the signature values `r` and `s` are non-zero. A signature consisting only of zeroes is always considered valid, making it trivial to forge signatures. Requiring multiple signatures from different public keys does not mitigate the issue: `ecdsa_verify_list_legacy()` will accept an arbitrary number of such forged signatures. Both the `ecdsautil verify` CLI command and the libecdsautil library are affected. The issue has been fixed in ecdsautils 0.4.1. All older versions of ecdsautils (including versions before the split into a library and a CLI utility) are vulnerable.

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-6239-1 advisory.

    It was discovered that ECDSA Util did not properly verify certain

    signature values. An attacker could possibly use this issue to bypass signature

    verification.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 10 / 11 host has a package installed that is affected by a vulnerability as referenced in the dsa-5132 advisory.

  - ecdsautils is a tiny collection of programs used for ECDSA (keygen, sign, verify).
    `ecdsa_verify_[prepare_]legacy()` does not check whether the signature values `r` and `s` are non-zero. A     signature consisting only of zeroes is always considered valid, making it trivial to forge signatures.
    Requiring multiple signatures from different public keys does not mitigate the issue:
    `ecdsa_verify_list_legacy()` will accept an arbitrary number of such forged signatures. Both the     `ecdsautil verify` CLI command and the libecdsautil library are affected. The issue has been fixed in     ecdsautils 0.4.1. All older versions of ecdsautils (including versions before the split into a library and     a CLI utility) are vulnerable. (CVE-2022-24884)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 9 host has a package installed that is affected by a vulnerability as referenced in the dla-2997 advisory.

  - ecdsautils is a tiny collection of programs used for ECDSA (keygen, sign, verify).
    `ecdsa_verify_[prepare_]legacy()` does not check whether the signature values `r` and `s` are non-zero. A     signature consisting only of zeroes is always considered valid, making it trivial to forge signatures.
    Requiring multiple signatures from different public keys does not mitigate the issue:
    `ecdsa_verify_list_legacy()` will accept an arbitrary number of such forged signatures. Both the     `ecdsautil verify` CLI command and the libecdsautil library are affected. The issue has been fixed in     ecdsautils 0.4.1. All older versions of ecdsautils (including versions before the split into a library and     a CLI utility) are vulnerable. (CVE-2022-24884)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
178636	Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS : ECDSA Util vulnerability (USN-6239-1)	Nessus	Ubuntu Local Security Checks	high
160846	Debian DSA-5132-1 : ecdsautils - security update	Nessus	Debian Local Security Checks	high
160714	Debian DLA-2997-1 : ecdsautils - LTS security update	Nessus	Debian Local Security Checks	high

Detections

Analytics

CVE-2022-24884

high

Tenable Plugins

high

high

high