https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 12:04:43 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-337124 EUVD-2026-337124 https://cve.radiocsirt.org/vuln/euvd-2026-337124 https://cve.radiocsirt.org/vuln/fkie_cve-2024-23680 <p>AWS Encryption SDK for Java versions 2.0.0 to 2.2.0 and less than 1.9.0 incorrectly validates some invalid ECDSA signatures.</p> <p>AWS Encryption SDK for Java versions 2.0.0 to 2.2.0 and less than 1.9.0 incorrectly validates some invalid ECDSA signatures.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-23680 https://cve.radiocsirt.org/vuln/ghsa-55xh-53m6-936r <p><strong>Affected:</strong> Maven: com.amazonaws:aws-encryption-sdk-java</p> <p>### Impact</p> <p>This advisory addresses several LOW severity issues with streaming signed messages and restricting processing of certain types of invalid messages.</p> <p>This update addresses an issue where certain invalid ECDSA signatures incorrectly passed validation. These signatures provide defense in depth and there is no impact on the integrity of decrypted plaintext.</p> <p>This ESDK supports a streaming mode where callers may stream the plaintext of signed messages before the ECDSA signature is validated. In addition to these signatures, the ESDK uses AES-GCM encryption and all plaintext is verified before being released to a caller. There is no impact on the integrity of the ciphertext or decrypted plaintext, however some callers may rely on the the ECDSA signature for non-repudiation. Without validating the ECDSA signature, an actor with trusted KMS permissions to decrypt a message may also be able to encrypt messages. This update introduces a new API for callers who wish to stream only unsigned messages.</p> <p>For customers who process ESDK messages from untrusted sources, this update also introduces a new configuration to limit the number of Encrypted Data Keys (EDKs) that the ESDK will attempt to process per message. This configuration provides customers with a way to limit the number of AWS KMS Decrypt API calls that the ESDK will make per message. This setting will reject messages with more EDKs than the configured limit.</p> <p>Finally, this update adds early rejection of invalid me…</p> <p><strong>Affected:</strong> Maven: com.amazonaws:aws-encryption-sdk-java</p> <p>### Impact</p> <p>This advisory addresses several LOW severity issues with streaming signed messages and restricting processing of certain types of invalid messages.</p> <p>This update addresses an issue where certain invalid ECDSA signatures incorrectly passed validation. These signatures provide defense in depth and there is no impact on the integrity of decrypted plaintext.</p> <p>This ESDK supports a streaming mode where callers may stream the plaintext of signed messages before the ECDSA signature is validated. In addition to these signatures, the ESDK uses AES-GCM encryption and all plaintext is verified before being released to a caller. There is no impact on the integrity of the ciphertext or decrypted plaintext, however some callers may rely on the the ECDSA signature for non-repudiation. Without validating the ECDSA signature, an actor with trusted KMS permissions to decrypt a message may also be able to encrypt messages. This update introduces a new API for callers who wish to stream only unsigned messages.</p> <p>For customers who process ESDK messages from untrusted sources, this update also introduces a new configuration to limit the number of Encrypted Data Keys (EDKs) that the ESDK will attempt to process per message. This configuration provides customers with a way to limit the number of AWS KMS Decrypt API calls that the ESDK will make per message. This setting will reject messages with more EDKs than the configured limit.</p> <p>Finally, this update adds early rejection of invalid me…</p> https://cve.radiocsirt.org/vuln/ghsa-55xh-53m6-936r https://cve.radiocsirt.org/vuln/gsd-2024-23680 gsd-2024-23680 https://cve.radiocsirt.org/vuln/gsd-2024-23680