Skip to content
OpenAdvisories
Critical DSA-5132-1 1 CVE

ecdsautils - security update

Published May 8, 2022 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

ReleasePackageFixed in
Debian · 10 ecdsautils 0.3.2+git20151018-2+deb10u1
Debian · 11 ecdsautils 0.3.2+git20151018-2+deb11u1

Vulnerabilities 1

  • Critical 10.0
    CVE-2022-24884

    Trivial signature forgery in ecdsautils

    ecdsautils is a tiny collection of programs used for ECDSA (keygen, sign, verify). `ecdsa_verify_[prepare_]legacy()` does not check whether the signature values `r` and `s` are non-zero. A signature consisting only of zeroes is always considered valid, making…

    freifunk-gluon ecdsautils ecdsautils ecdsautils Debian Ubuntu