Skip to content
OpenAdvisories

Product · trailofbits

rfc3161-client

2 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.3

    rfc3161-client has insufficient verification for timestamp response signatures

    rfc3161-client is a Python library implementing the Time-Stamp Protocol (TSP) described in RFC 3161. Prior to version 1.0.3, there is a flaw in the timestamp response signature verification logic. In particular, chain verification is performed against the TSR…