CVE-2023-46234
published 2023-10-26CVE-2023-46234: browserify-sign is a package to duplicate the functionality of node's crypto public key functions, much of this is based on Fedor Indutny's work on…
PriorityP343high7.5CVSS 3.1
AVNACLPRNUINSUCNIHAN
EPSS
0.51%
40.6th percentile
browserify-sign is a package to duplicate the functionality of node's crypto public key functions, much of this is based on Fedor Indutny's work on indutny/tls.js. An upper bound check issue in `dsaVerify` function allows an attacker to construct signatures that can be successfully verified by any public key, thus leading to a signature forgery attack. All places in this project that involve DSA verification of user-input signatures will be affected by this vulnerability. This issue has been patched in version 4.2.2.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| atlassian | confluence_data_center | — | — |
| browserify | browserify-sign | < 4.2.2 | 4.2.2 |
| browserify | browserify-sign | — | — |
| browserify | browserify-sign | >= 2.6.0 < 4.2.2 | 4.2.2 |
| debian | debian_linux | — | — |
| debian | debian_linux | — | — |
| debian | node-browserify-sign | < node-browserify-sign 4.2.1-3+deb12u1 (bookworm) | node-browserify-sign 4.2.1-3+deb12u1 (bookworm) |
| msrc | cbl2_reaper_3.1.1-9_on_cbl_mariner_2.0 | — | — |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
osv7.5HIGH
vendor_msrc7.5HIGH
vendor_debian6.5MEDIUM
vendor_redhat6.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Atlassian
CVE-2023-46234: BASM (Broken Authentication & Session Management) browserify-sign Dependency in Confluence Data Center
vendor_atlassian·2024-11-19·CVSS 7.5
CVE-2023-46234 [MEDIUM] CVE-2023-46234: BASM (Broken Authentication & Session Management) browserify-sign Dependency in Confluence Data Center
CVE-2023-46234: BASM (Broken Authentication & Session Management) browserify-sign Dependency in Confluence Data Center
BASM (Broken Authentication & Session Management) browserify-sign Dependency in Confluence Data Center
CVE: CVE-2023-46234
Affected products: Confluence Data Center
Ubuntu
browserify-sign vulnerability
vendor_ubuntu·2024-05-30
CVE-2023-46234 browserify-sign vulnerability
Title: browserify-sign vulnerability
Summary: browserify-sign could allow unintended access if it opened a specially crafted
file.
It was discovered that browserify-sign incorrectly handled an upper bound check
in signature verification. If a user or an automated system were tricked into
opening a specially crafted input file, a remote attacker could possibly use
this issue to perform a signature forgery attack.
Instructions: In general, a standard system update will make all the necessary changes.
Red Hat
browserify-sign: upper bound check issue in dsaVerify leads to a signature forgery attack
vendor_redhat·2023-10-26·CVSS 6.5
CVE-2023-46234 [MEDIUM] CWE-347 browserify-sign: upper bound check issue in dsaVerify leads to a signature forgery attack
browserify-sign: upper bound check issue in dsaVerify leads to a signature forgery attack
browserify-sign is a package to duplicate the functionality of node's crypto public key functions, much of this is based on Fedor Indutny's work on indutny/tls.js. An upper bound check issue in `dsaVerify` function allows an attacker to construct signatures that can be successfully verified by any public key, thus leading to a signature forgery attack. All places in this project that involve DSA verification of user-input signatures will be affected by this vulnerability. This issue has been patched in version 4.2.2.
A flaw was found in browserify-sign node package. This issue may allow a malicious user to execute a signature forgery attack by not correctly checking cryptographic signatures for DSA
Microsoft
browserify-sign vulnerable via an upper bound check issue in `dsaVerify` that leads to a signature forgery attack
vendor_msrc·2023-10-10·CVSS 7.5
CVE-2023-46234 [MEDIUM] CWE-347 browserify-sign vulnerable via an upper bound check issue in `dsaVerify` that leads to a signature forgery attack
browserify-sign vulnerable via an upper bound check issue in `dsaVerify` that leads to a signature forgery attack
FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?
One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See this blog post for more information. If impact to additional products is identified, we will update the CVE to reflect this.
Mariner: Mariner
GitHub_M: GitHub_M
Customer Action Required:
Debian
CVE-2023-46234: node-browserify-sign - browserify-sign is a package to duplicate the functionality of node's crypto pub...
vendor_debian·2023·CVSS 6.5
CVE-2023-46234 [MEDIUM] CVE-2023-46234: node-browserify-sign - browserify-sign is a package to duplicate the functionality of node's crypto pub...
browserify-sign is a package to duplicate the functionality of node's crypto public key functions, much of this is based on Fedor Indutny's work on indutny/tls.js. An upper bound check issue in `dsaVerify` function allows an attacker to construct signatures that can be successfully verified by any public key, thus leading to a signature forgery attack. All places in this project that involve DSA verification of user-input signatures will be affected by this vulnerability. This issue has been patched in version 4.2.2.
Scope: local
bookworm: resolved (fixed in 4.2.1-3+deb12u1)
bullseye: resolved (fixed in 4.2.1-1+deb11u1)
forky: resolved (fixed in 4.2.2-1)
sid: resolved (fixed in 4.2.2-1)
trixie: resolved (fixed in 4.2.2-1)
OSV
browserify-sign upper bound check issue in `dsaVerify` leads to a signature forgery attack
osv·2023-10-26
CVE-2023-46234 [HIGH] browserify-sign upper bound check issue in `dsaVerify` leads to a signature forgery attack
browserify-sign upper bound check issue in `dsaVerify` leads to a signature forgery attack
### Summary
An upper bound check issue in `dsaVerify` function allows an attacker to construct signatures that can be successfully verified by any public key, thus leading to a signature forgery attack.
### Details
In `dsaVerify` function, it checks whether the value of the signature is legal by calling function `checkValue`, namely, whether `r` and `s` are both in the interval `[1, q - 1]`. However, the second line of the `checkValue` function wrongly checks the upper bound of the passed parameters, since the value of `b.cmp(q)` can only be `0`, `1` and `-1`, and it can never be greater than `q`.
In this way, although the values of `s` cannot be `0`, an attacker can achieve the same effect as zer
OSV
CVE-2023-46234: browserify-sign is a package to duplicate the functionality of node's crypto public key functions, much of this is based on Fedor Indutny's work on in
osv·2023-10-26·CVSS 7.5
CVE-2023-46234 [HIGH] CVE-2023-46234: browserify-sign is a package to duplicate the functionality of node's crypto public key functions, much of this is based on Fedor Indutny's work on in
browserify-sign is a package to duplicate the functionality of node's crypto public key functions, much of this is based on Fedor Indutny's work on indutny/tls.js. An upper bound check issue in `dsaVerify` function allows an attacker to construct signatures that can be successfully verified by any public key, thus leading to a signature forgery attack. All places in this project that involve DSA verification of user-input signatures will be affected by this vulnerability. This issue has been patched in version 4.2.2.
GHSA
browserify-sign upper bound check issue in `dsaVerify` leads to a signature forgery attack
ghsa·2023-10-26
CVE-2023-46234 [HIGH] CWE-347 browserify-sign upper bound check issue in `dsaVerify` leads to a signature forgery attack
browserify-sign upper bound check issue in `dsaVerify` leads to a signature forgery attack
### Summary
An upper bound check issue in `dsaVerify` function allows an attacker to construct signatures that can be successfully verified by any public key, thus leading to a signature forgery attack.
### Details
In `dsaVerify` function, it checks whether the value of the signature is legal by calling function `checkValue`, namely, whether `r` and `s` are both in the interval `[1, q - 1]`. However, the second line of the `checkValue` function wrongly checks the upper bound of the passed parameters, since the value of `b.cmp(q)` can only be `0`, `1` and `-1`, and it can never be greater than `q`.
In this way, although the values of `s` cannot be `0`, an attacker can achieve the same effect as zer
No detection rules found.
No public exploits indexed.
https://github.com/browserify/browserify-sign/commit/85994cd6348b50f2fd1b73c54e20881416f44a30https://github.com/browserify/browserify-sign/security/advisories/GHSA-x9w5-v3q2-3rhwhttps://lists.debian.org/debian-lts-announce/2023/10/msg00040.htmlhttps://lists.fedoraproject.org/archives/list/[email protected]/message/3HUE6ZR5SL73KHL7XUPAOEL6SB7HUDT2/https://lists.fedoraproject.org/archives/list/[email protected]/message/6PVVPNSAGSDS63HQ74PJ7MZ3MU5IYNVZ/https://www.debian.org/security/2023/dsa-5539https://github.com/browserify/browserify-sign/commit/85994cd6348b50f2fd1b73c54e20881416f44a30https://github.com/browserify/browserify-sign/security/advisories/GHSA-x9w5-v3q2-3rhwhttps://lists.debian.org/debian-lts-announce/2023/10/msg00040.htmlhttps://lists.fedoraproject.org/archives/list/[email protected]/message/3HUE6ZR5SL73KHL7XUPAOEL6SB7HUDT2/https://lists.fedoraproject.org/archives/list/[email protected]/message/6PVVPNSAGSDS63HQ74PJ7MZ3MU5IYNVZ/https://www.debian.org/security/2023/dsa-5539
2023-10-26
Published