Skip to content
OpenAdvisories
Critical DLA-2997-1 1 CVE

ecdsautils - security update

Published May 7, 2022 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 9 ecdsautils 0.3.2+git20151018-2+deb9u1

Vulnerabilities 1

  • Critical 10.0
    CVE-2022-24884

    Trivial signature forgery in ecdsautils

    ecdsautils is a tiny collection of programs used for ECDSA (keygen, sign, verify). `ecdsa_verify_[prepare_]legacy()` does not check whether the signature values `r` and `s` are non-zero. A signature consisting only of zeroes is always considered valid, making…

    freifunk-gluon ecdsautils ecdsautils ecdsautils Debian Ubuntu