CVE Feed

    Dashboard / CVE / CVE-2019-15545

    CVE-2019-15545

    An issue was discovered in the libp2p-core crate before 0.8.1 for Rust. Attackers can spoof ed25519 signatures.

    Published:Aug 26, 2019
    Last Modified:Nov 21, 2024
    EPS:Aug 26, 2019
    EPSS Score:0.00145
    CVSS Score:7.5

    Affected Products

    Vendor
    Libp2p
    Product
    Libp2p

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-463 Padding Oracle Crypto Attack
    CAPEC-475 Signature Spoofing by Improper Validation

    Related CVEs

    CVE-2026-103936 (CVSS 7.5) — libp2p is a JavaScript implementation of the libp2p networking stack. Prior to 6.0.28, the @libp2p/webrtc webR…
    CVE-2026-86040 (CVSS 7.5) — libp2p is a JavaScript implementation of the libp2p networking stack. Prior to 11.0.26, @libp2p/floodsub accep…
    CVE-2026-86039 (CVSS 8.2) — libp2p is a JavaScript implementation of the libp2p networking stack. From 8.0.0 until 12.0.24, @libp2p/peer-s…
    CVE-2026-86038 (CVSS 7.5) — libp2p is a JavaScript implementation of the libp2p networking stack. From 15.0.0 until 16.0.5, @libp2p/gossip…
    CVE-2026-73568 (CVSS 7.5) — py-libp2p is the Python implementation of the libp2p networking stack. In 0.7.0 and earlier, the yamux handle_…
    CVE-2026-49866 (CVSS 7.5) — libp2p is a JavaScript Implementation of libp2p networking stack. Prior to 16.0.0, @libp2p/gossipsub defaultDe…
    CVE-2026-45783 (CVSS 7.5) — libp2p is a JavaScript Implementation of libp2p networking stack. Prior to version 16.2.6, an unauthenticated …
    CVE-2026-46679 (CVSS 7.5) — libp2p is a JavaScript Implementation of libp2p networking stack. Prior to version 15.0.23, three cooperating …
    CVE-2026-33040 (CVSS 8.7) — libp2p-rust is the official rust language Implementation of the libp2p networking stack. In versions prior to …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High