medium5.3
CVE-2024-23680
AWS Encryption SDK for Java versions 2.0.0 to 2.2.0 and less than 1.9.0 incorrectly validates some invalid ECDSA signatures.
Impact
AWS Encryption SDK for Java versions 2.0.0 to 2.2.0 and less than 1.9.0 incorrectly validates some invalid ECDSA signatures.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Amazon | Aws Encryption Sdk | before 1.9.0 from 2.0.0 before 2.2.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/advisories/GHSA-55xh-53m6-936r
- https://github.com/aws/aws-encryption-sdk-java/security/advisories/GHSA-55xh-53m6-936r
- https://vulncheck.com/advisories/vc-advisory-GHSA-55xh-53m6-936r
- https://github.com/advisories/GHSA-55xh-53m6-936r
- https://github.com/aws/aws-encryption-sdk-java/security/advisories/GHSA-55xh-53m6-936r
- https://vulncheck.com/advisories/vc-advisory-GHSA-55xh-53m6-936r