vulnerability

SUSE: CVE-2024-42460: SUSE Linux Security Advisory

Severity
5
CVSS
(AV:N/AC:L/Au:N/C:P/I:N/A:N)
Published
Jan 18, 2025
Added
Dec 5, 2025
Modified
Dec 5, 2025

Description

In the Elliptic package 6.5.6 for Node.js, ECDSA signature malleability occurs because there is a missing check for whether the leading bit of r and s is zero.

Solutions

suse-upgrade-system-user-velociraptorsuse-upgrade-velociraptorsuse-upgrade-velociraptor-client
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.