Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in fastecdsa before 2.1.2. When using the NIST P-256 curve in the ECDSA implementation, the point at infinity is mishandled. This means that for an extreme value in k and s^-1, the signature verification fails even if the signature is correct. This behavior is not solely a usability problem. There are some threat models where an attacker can benefit by successfully guessing users for whom signature verification will fail.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
fastecdsa 数据伪造问题漏洞
Vulnerability Description
fastecdsa是AntonKueltz软件开发者的一款用于快速椭圆曲线加密的Python库。 fastecdsa 2.1.2之前版本中存在安全漏洞。目前尚无此漏洞的相关信息，请随时关注CNNVD或厂商公告。
CVSS Information
N/A
Vulnerability Type
N/A