Is Nimbus-JOSE-JWT vulnerable to CVE-2022-21449?

[Former user]

Hi,

Just wondering if there is a concrete unit test, or other verification, that can show that the issue described below doesn't impact this project?

https://neilmadden.blog/2022/04/19/psychic-signatures-in-java/

Thanks!

Josh Mahonin

‌

[Vladimir Dzhuvinov]

Hi Josh,

Neil’s test vector with blank P1363 formatted signature gets rejected in the ECDSA.transcodeSignatureToDER method with a JOSEException. We hope to have concrete tests and perhaps a better exception soon.

[Thomas Maier]

Do you already have concrete information if Nimbus-Jose-JWT is affected (or better not)?

Thank you!

[Vladimir Dzhuvinov]

Apps are safe, but do make sure you update to the latest 9.21.1, it gets an extra line of defense against CVE exploits:

https://connect2id.com/blog/cve-2022-21449

[Vladimir Dzhuvinov]

Link to the test:

https://bitbucket.org/connect2id/nimbus-jose-jwt/src/5529f77b5c3539c24027bc6955278734bcea185f/src/test/java/com/nimbusds/jose/crypto/ECDSATest.java#lines-128

[Vladimir Dzhuvinov]

Removed reporter’s email address

[Thomas Maier]

sorry for the stupid question, but the current Version without an update is also already safe but the new version adds additional security?

[Vladimir Dzhuvinov]

That’s alright. All Nimbus versions are safe in respect to this CVE, and ES*** signatures have been supported since 2013 or so.

[Vladimir Dzhuvinov]

2nd attempt to remove email

[Vladimir Dzhuvinov]

Last night it was reported that the DER transcoder will not prevent mod N attacks from reaching the Java ECDSA provider. This means that apps using this lib with Java 15+ runtimes were in fact vulnerable. A patch will be published soon. Stay tuned!

[Vladimir Dzhuvinov]

Fix: 651580526d8e815420e06abe31c0b4976c4afec9

Released in: 9.22

Updated assessment: https://connect2id.com/blog/cve-2022-21449