CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-46234

browserify-sign is a package to duplicate the functionality of node's crypto public key functions, much of this is based on Fedor Indutny's work on indutny/tls.js. An upper bound check issue in `dsaVerify` function allows an attacker to construct signatures that can be successfully verified by any public key, thus leading to a signature forgery attack. All places in this project that involve DSA verification of user-input signatures will be affected by this vulnerability. This issue has been patched in version 4.2.2.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.004

EPSS Ranking 58.9%

CVSS Severity

CVSS v3 Score 6.5

References

Products affected by CVE-2023-46234

Browserify » Browserify-Sign » Version: 2.1.0

cpe:2.3:a:browserify:browserify-sign:2.1.0
Browserify » Browserify-Sign » Version: 2.2.0

cpe:2.3:a:browserify:browserify-sign:2.2.0
Browserify » Browserify-Sign » Version: 2.3.0

cpe:2.3:a:browserify:browserify-sign:2.3.0
Browserify » Browserify-Sign » Version: 2.4.0

cpe:2.3:a:browserify:browserify-sign:2.4.0
Browserify » Browserify-Sign » Version: 2.5.0

cpe:2.3:a:browserify:browserify-sign:2.5.0
Browserify » Browserify-Sign » Version: 2.5.1

cpe:2.3:a:browserify:browserify-sign:2.5.1
Browserify » Browserify-Sign » Version: 2.5.2

cpe:2.3:a:browserify:browserify-sign:2.5.2
Browserify » Browserify-Sign » Version: 2.6.0

cpe:2.3:a:browserify:browserify-sign:2.6.0
Browserify » Browserify-Sign » Version: 2.6.1

cpe:2.3:a:browserify:browserify-sign:2.6.1
Browserify » Browserify-Sign » Version: 2.7.0

cpe:2.3:a:browserify:browserify-sign:2.7.0
Browserify » Browserify-Sign » Version: 2.7.1

cpe:2.3:a:browserify:browserify-sign:2.7.1
Browserify » Browserify-Sign » Version: 2.7.2

cpe:2.3:a:browserify:browserify-sign:2.7.2
Browserify » Browserify-Sign » Version: 2.7.3

cpe:2.3:a:browserify:browserify-sign:2.7.3
Browserify » Browserify-Sign » Version: 2.7.4

cpe:2.3:a:browserify:browserify-sign:2.7.4
Browserify » Browserify-Sign » Version: 2.7.5

cpe:2.3:a:browserify:browserify-sign:2.7.5
Browserify » Browserify-Sign » Version: 2.8.0

cpe:2.3:a:browserify:browserify-sign:2.8.0
Browserify » Browserify-Sign » Version: 3.0.0

cpe:2.3:a:browserify:browserify-sign:3.0.0
Browserify » Browserify-Sign » Version: 3.0.1

cpe:2.3:a:browserify:browserify-sign:3.0.1
Browserify » Browserify-Sign » Version: 3.0.2

cpe:2.3:a:browserify:browserify-sign:3.0.2
Browserify » Browserify-Sign » Version: 3.0.3

cpe:2.3:a:browserify:browserify-sign:3.0.3
Browserify » Browserify-Sign » Version: 3.0.8

cpe:2.3:a:browserify:browserify-sign:3.0.8
Browserify » Browserify-Sign » Version: 4.0.0

cpe:2.3:a:browserify:browserify-sign:4.0.0
Browserify » Browserify-Sign » Version: 4.0.1

cpe:2.3:a:browserify:browserify-sign:4.0.1
Browserify » Browserify-Sign » Version: 4.0.2

cpe:2.3:a:browserify:browserify-sign:4.0.2
Browserify » Browserify-Sign » Version: 4.0.3

cpe:2.3:a:browserify:browserify-sign:4.0.3
Browserify » Browserify-Sign » Version: 4.0.4

cpe:2.3:a:browserify:browserify-sign:4.0.4
Browserify » Browserify-Sign » Version: 4.1.0

cpe:2.3:a:browserify:browserify-sign:4.1.0
Browserify » Browserify-Sign » Version: 4.2.0

cpe:2.3:a:browserify:browserify-sign:4.2.0
Browserify » Browserify-Sign » Version: 4.2.1

cpe:2.3:a:browserify:browserify-sign:4.2.1
Debian » Debian Linux » Version: 11.0

cpe:2.3:o:debian:debian_linux:11.0
Debian » Debian Linux » Version: 12.0

cpe:2.3:o:debian:debian_linux:12.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-46234

Products

Pricing

Contact Us