Junglewise Threat Intelligence

CVE-2019-15545: RUSTSEC-2019-0004 - Failure to properly verify ed25519 signatures makes any signature valid

CVE-2019-15545 · Severity: low · CVSS 3 · Published 2019-05-15

Technologies: libp2p-core (crates.io). Vendors: crates.io.

Executive brief

Failure to properly verify ed25519 signatures makes any signature valid

Affected products

crates.io libp2p-core

Related threats

Failure to verify the public key of a `SignedEnvelope` against the `PeerId` in a `PeerRecord`
RUSTSEC-2022-0009 - Failure to verify the public key of a `SignedEnvelope` against the `PeerId` in a `PeerRecord`