{"schema_version":"1.3.1","id":"GO-2023-2096","modified":"2024-05-20T16:03:47Z","published":"2023-10-05T19:48:40Z","aliases":["CVE-2023-44273","GHSA-9xfq-8j3r-xp5g"],"summary":"Signature malleability in github.com/consensys/gnark-crypto","details":"Signature malleability in github.com/consensys/gnark-crypto","affected":[{"package":{"name":"github.com/consensys/gnark-crypto","ecosystem":"Go"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.12.0"}]}],"ecosystem_specific":{"imports":[{"path":"github.com/consensys/gnark-crypto/ecc/bls12-377/ecdsa","symbols":["PublicKey.Verify","Signature.SetBytes"]},{"path":"github.com/consensys/gnark-crypto/ecc/bls12-377/twistededwards","symbols":["Signature.SetBytes"]},{"path":"github.com/consensys/gnark-crypto/ecc/bls12-378/ecdsa","symbols":["PublicKey.Verify","Signature.SetBytes"]},{"path":"github.com/consensys/gnark-crypto/ecc/bls12-378/twistededwards/eddsa","symbols":["PublicKey.Verify","Signature.SetBytes"]},{"path":"github.com/consensys/gnark-crypto/ecc/bls12-381/bandersnatch/eddsa","symbols":["PublicKey.Verify","Signature.SetBytes"]},{"path":"github.com/consensys/gnark-crypto/ecc/bls12-381/ecdsa","symbols":["PublicKey.Verify","Signature.SetBytes"]},{"path":"github.com/consensys/gnark-crypto/ecc/bls12-381/twistededwards/eddsa","symbols":["PublicKey.Verify","Signature.SetBytes"]},{"path":"github.com/consensys/gnark-crypto/ecc/bls24-315/ecdsa","symbols":["PublicKey.Verify","Signature.SetBytes"]},{"path":"github.com/consensys/gnark-crypto/ecc/bls24-315/twistededwards/eddsa","symbols":["PublicKey.Verify","Signature.SetBytes"]},{"path":"github.com/consensys/gnark-crypto/ecc/bls24-317/ecdsa","symbols":["PublicKey.Verify","Signature.SetBytes"]},{"path":"github.com/consensys/gnark-crypto/ecc/bls24-317/twistededwards/eddsa","symbols":["PublicKey.Verify","Signature.SetBytes"]},{"path":"github.com/consensys/gnark-crypto/ecc/bn254/ecdsa","symbols":["PublicKey.Verify","Signature.SetBytes"]},{"path":"github.com/consensys/gnark-crypto/ecc/bn254/twistededwards/eddsa","symbols":["PublicKey.Verify","Signature.SetBytes"]},{"path":"github.com/consensys/gnark-crypto/ecc/bw6-633/ecdsa","symbols":["PublicKey.Verify","Signature.SetBytes"]},{"path":"github.com/consensys/gnark-crypto/ecc/bw6-633/twistededwards/eddsa","symbols":["PublicKey.Verify","Signature.SetBytes"]},{"path":"github.com/consensys/gnark-crypto/ecc/bw6-756/ecdsa","symbols":["PublicKey.Verify","Signature.SetBytes"]},{"path":"github.com/consensys/gnark-crypto/ecc/bw6-756/twistededwards/eddsa","symbols":["PublicKey.Verify","Signature.SetBytes"]},{"path":"github.com/consensys/gnark-crypto/ecc/bw6-761/ecdsa","symbols":["PublicKey.Verify","Signature.SetBytes"]},{"path":"github.com/consensys/gnark-crypto/ecc/bw6-761/twistededwards/eddsa","symbols":["PublicKey.Verify","Signature.SetBytes"]},{"path":"github.com/consensys/gnark-crypto/ecc/secp256k1/ecdsa","symbols":["PublicKey.Verify","Signature.SetBytes"]},{"path":"github.com/consensys/gnark-crypto/ecc/stark-curve/ecdsa","symbols":["PublicKey.Verify","Signature.SetBytes"]}]}}],"references":[{"type":"FIX","url":"https://github.com/Consensys/gnark-crypto/pull/449"},{"type":"WEB","url":"https://verichains.io"},{"type":"WEB","url":"https://github.com/Consensys/gnark-crypto/releases/tag/v0.12.0"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-9xfq-8j3r-xp5g"}],"database_specific":{"url":"https://pkg.go.dev/vuln/GO-2023-2096","review_status":"REVIEWED"}}