CyberSecBulletin

Freifunk-gluon vulnerabilities

We track 1 vulnerability in Freifunk-gluon products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on May 6, 2022.

1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score

Latest Freifunk-gluon vulnerabilities

  • 7.5 High severity

    ecdsautils: Improper Verification of Cryptographic Signature

    CVE-2022-24884Freifunk-gluonEPSS 1.04%

    ecdsautils is a tiny collection of programs used for ECDSA (keygen, sign, verify). `ecdsa_verify_[prepare_]legacy()` does not check whether the signature values `r` and `s` are non-zero. A signature consisting only of zeroes is always considered valid, making