Starkbank

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical5CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Starkbank records in CISA KEV

No Starkbank vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Ecdsa-dotnet 1 record MEDIUM Ecdsa-java 1 record MEDIUM Ecdsa-node 1 record MEDIUM Ecdsa-python 1 record MEDIUM Elixir Ecdsa 1 record MEDIUM

Records

1 record in Ecdsa-java · all components

TI-2021-19459 CVE-2021-43570 · GHSA-r28h-x6hv-2fq3

The verify function in the Stark Bank Java ECDSA library (ecdsa-java) 1.0.0 fails to…

MEDIUM 44

The verify function in the Stark Bank Java ECDSA library (ecdsa-java) 1.0.0 fails to check that the signature is non-zero, which allows attackers to forge signatures on arbitrary messages.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01027 Published 2021-11-09 Fixed in 1.0.1 CWE-347

Open these records in search →

Critical	5
High	0
Medium	0
Low	0
No CVSS	0