{"id":"GHSA-xxxq-chmp-67g4","summary":"RSA PKCS#1 decryption vulnerability with prepending zeros in jsrsasign","details":"### Impact\nJsrsasign supports RSA PKCS#1 v1.5 (i.e. RSAES-PKCS1-v1_5) and RSA-OAEP encryption and decryption. Its encrypted message is represented as BigInteger. When there is a valid encrypted message, a crafted message with prepending zeros can be decrypted by this vulnerability.\n\n- If you don't use RSA PKCS1-v1_5 or RSA-OAEP decryption, this vulnerability is not affected.\n- Risk to forge contents of encrypted message is very low.\n- Risk to raise memory corruption is low since jsrsasign uses BigInteger class.\n\n### Patches\nUsers using RSA PKCS1-v1_5 or RSA-OAEP decryption should upgrade to 8.0.18.\n\n### Workarounds\nReject RSA PKCS1-v1_5 or RSA-OAEP encrypted message with unnecessary prepending zeros.\n\n### References\nhttps://nvd.nist.gov/vuln/detail/CVE-2020-14967\nhttps://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14967\nhttps://vuldb.com/?id.157124\nhttps://kjur.github.io/jsrsasign/api/symbols/KJUR.crypto.Cipher.html#.decrypt\nhttps://github.com/kjur/jsrsasign/issues/439\n\n\n\n","aliases":["CVE-2020-14967"],"modified":"2023-11-01T04:51:54.946033Z","published":"2020-06-26T16:27:08Z","database_specific":{"github_reviewed_at":"2020-06-26T16:26:32Z","nvd_published_at":"2020-06-22T12:15:00Z","cwe_ids":["CWE-119"],"severity":"CRITICAL","github_reviewed":true},"references":[{"type":"WEB","url":"https://github.com/kjur/jsrsasign/security/advisories/GHSA-xxxq-chmp-67g4"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2020-14967"},{"type":"WEB","url":"https://github.com/kjur/jsrsasign/issues/439"},{"type":"WEB","url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14967"},{"type":"PACKAGE","url":"https://github.com/kjur/jsrsasign"},{"type":"WEB","url":"https://github.com/kjur/jsrsasign/releases/tag/8.0.17"},{"type":"WEB","url":"https://github.com/kjur/jsrsasign/releases/tag/8.0.18"},{"type":"WEB","url":"https://kjur.github.io/jsrsasign"},{"type":"WEB","url":"https://kjur.github.io/jsrsasign/api/symbols/KJUR.crypto.Cipher.html#.decrypt"},{"type":"WEB","url":"https://security.netapp.com/advisory/ntap-20200724-0001"},{"type":"WEB","url":"https://vuldb.com/?id.157124"},{"type":"WEB","url":"https://www.npmjs.com/package/jsrsasign"}],"affected":[{"package":{"name":"jsrsasign","ecosystem":"npm","purl":"pkg:npm/jsrsasign"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"8.0.18"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2020/06/GHSA-xxxq-chmp-67g4/GHSA-xxxq-chmp-67g4.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}