Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:12305
HistoryJan 15, 2019 - 9:15 a.m.

Unauthorised Modification

2019-01-1509:15:34
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11

0.004 Low

EPSS

Percentile

74.3%

The java-1.8.0-openjdk packages is vulnerable to unauthorised modification. The vulnerability exists because it accepts ECSDA signatures using non-canonical DER encoding, leading to accept incorrect format not accepted by other cryptographic tools.