GHSA-4q4x-67hx-5mpgHighCVSS 7.5

Failure to properly verify ed25519 signatures in libp2p-core

Published
August 25, 2021
Last Modified
June 13, 2023

🔗 CVE IDs covered (1)

CVE-2019-15545 →

📋 Description

Affected versions of this crate did not properly verify ed25519 signatures. Any signature with a correct length was considered valid. This allows an attacker to impersonate any node identity.

🎯 Affected products1

  • rust/libp2p-core:< 0.8.1

🔗 References (3)