GHSA-27fj-mc8w-j9wg

    Dashboard / Vulnerabilities / GHSA-27fj-mc8w-j9wg

    GHSA-27fj-mc8w-j9wg

    Published: 16 Apr 2021Last Modified: 8 Nov 2023

    Summary: RSA signature validation vulnerability on maleable encoded message in jsrsasign

    Details: ### Impact Vulnerable jsrsasign will accept RSA signature with improper PKCS#1.5 padding. Decoded RSA signature value consists following form: `01(ff...(8 or more ffs)...ff)00[ASN.1 OF DigestInfo]` Its byte length must be the same as RSA key length, however such checking was not sufficient. To make crafted message for practical attack is very hard. ### Patches Users validating RSA signature should upgrade to 10.2.0 or later. ### Workarounds There is no workaround. Not to use RSA signature validation in jsrsasign. ### ACKNOWLEDGEMENT Thanks to Daniel Yahyazadeh @yahyazadeh for reporting and analyzing this vulnerability.

    References: https://github.com/kjur/jsrsasign/security/advisories/GHSA-27fj-mc8w-j9wg, https://nvd.nist.gov/vuln/detail/CVE-2021-30246, https://github.com/kjur/jsrsasign/issues/478, https://github.com/kjur/jsrsasign/releases/tag/10.1.13, https://kjur.github.io/jsrsasign

    Affected packages

    Package

    Name: jsrsasign

    Purl: pkg:npm/jsrsasign

    Affected ranges

    Type: SEMVER

    Events:

    Introduced- 0
    Fixed -10.2.0

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    GHSA-27fj-mc8w-j9wg | CVE-DB