CVE-2026-4599
קריטית 9.1
תיאור (מקור, אנגלית)
Versions of the package jsrsasign from 7.0.0 and before 11.1.1 are vulnerable to Incomplete Comparison with Missing Factors via the getRandomBigIntegerZeroToMax and getRandomBigIntegerMinToMax functions in src/crypto-1.1.js; an attacker can recover the private key by exploiting the incorrect compareTo checks that accept out-of-range candidates and thus bias DSA nonces during signature generation.
מדדים
- CVSS 3.1
-
9.1 (CRITICAL)
מקור הציון: CNA
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N - CVSS 4.0
-
9.3 (CRITICAL)
מקור הציון: CNA
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - EPSS — סבירות ניצול
- 0% (אחוזון 000) נכון ל-26/7/2026
- CWE
- CWE-1023, CWE-338
מוצרים מושפעים
kjur: jsrsasign
קישורים
- https://github.com/kjur/jsrsasign/commit/ee4b013478366cb16cea9a4bdfb218b6077f8… Patch
- https://gist.github.com/Kr0emer/081681818b51605c91945126d74b4f20 ExploitMitigationThird Party Advisory
- https://github.com/kjur/jsrsasign/pull/647 Issue Tracking
- https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-15812264
- https://security.snyk.io/vuln/SNYK-JS-JSRSASIGN-15370939 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2026:19375
- https://access.redhat.com/errata/RHSA-2026:19409
- https://access.redhat.com/errata/RHSA-2026:19410
- https://access.redhat.com/errata/RHSA-2026:6568
- https://access.redhat.com/errata/RHSA-2026:6720