High · 7.5 CVE-2019-15545 EUVD-2021-1561GHSA-4q4x-67hx-5mpgRUSTSEC-2019-0004

Failure to properly verify ed25519 signatures in libp2p-core

Published Aug 26, 2019 · Updated Aug 5, 2024 · Assigned by mitre

Description

An issue was discovered in the libp2p-core crate before 0.8.1 for Rust. Attackers can spoof ed25519 signatures.

Ecosystem	Package	Affected	Fixed	Record
crates.io	libp2p-core	< 0.8.1	0.8.1	GHSA-4q4x-67hx-5mpg
crates.io	libp2p-core	>= 0.3.0, < 0.7.1 · >= 0.8.0-0, < 0.8.1	0.7.1, 0.8.1	RUSTSEC-2019-0004

OSV:GHSA	v3.0	7.5
OSV:RUSTSEC	v3.0	7.5