CVE:CVE-2022-24884
CNNVD:CNNVD-202205-2562
ECDSA Util是一个用于 ECDSA 的小程序集合。
ECDSA Util 0.4.1之前版本存在安全漏洞，该漏洞源于ecdsa_verify_[prepare_]legacy()不检查签名值r和s是否非零。
solution:Upgrade ecdsautils_project ecdsautils to a higher version than 0.4.1,and avoid the version (,0.4.1); Upgrade fedoraproject fedora to a higher version than 34,35,36,and avoid the version 34,35,36; Upgrade debian debian_linux to a higher version than 9.0,10.0,11.0,and avoid the version 9.0,10.0,11.0