Elliptic Uses a Cryptographic Primitive with a Risky Implementation

The core of the vulnerability lies in the ECDSA (Elliptic Curve Digital Signature Algorithm) implementation within the elliptic package. Specifically, the calculation of the intermediate value 'k' is flawed. RFC 6979 outlines a specific process for this calculation, and the elliptic package incorrectly truncates 'k' when it has leading zeros. This truncation allows an attacker, under certain conditions, to derive the private key used to generate the signatures. Successful key derivation would allow an attacker to forge signatures, impersonate users, and potentially compromise the entire system relying on these signatures. The impact is particularly severe in applications using elliptic for authentication or secure transactions.

Applications and services built on Node.js that rely on the elliptic package for cryptographic operations are at risk. This includes systems performing authentication, digital signatures, or secure communication using ECDSA. Projects using older versions of Node.js or those with complex dependency chains are particularly vulnerable.

• nodejs: Use npm list elliptic to identify vulnerable versions. Check package.json for dependencies on elliptic versions <= 6.6.1.

npm list elliptic

• nodejs: Examine application logs for errors related to signature verification or ECDSA operations. Look for unusual patterns or failures in signature validation. • generic web: Monitor for unexpected or unauthorized access attempts, which could indicate a compromised key. • generic web: Review code for any direct usage of the elliptic package and ensure proper signature validation routines are in place.

1. 2026-01-08Disclosure

   disclosure

1. 予約済み2025-12-10
2. 公開日2026-01-08
3. 更新日2026-02-17
4. EPSS 更新日2026-03-23

The primary mitigation for CVE-2025-14505 is to upgrade the elliptic package to version 6.6.2 or later. If an immediate upgrade is not feasible due to compatibility issues or breaking changes, consider implementing stricter input validation on signatures received from systems using vulnerable versions of elliptic. While not a complete solution, this can help detect and reject potentially forged signatures. Monitor network traffic for unusual signature patterns. There are no specific WAF rules or Sigma/YARA patterns readily available for this vulnerability, as it's a cryptographic flaw rather than a direct exploit.

最終更新

6.6.118ヶ月前