CVE-2020-14967
Critical · CVSS 9.8jsrsasign — RSA PKCS1 v1.5 decryption ciphertext modification memory corruption
- CVSS
- 9.8
- nvd
- EPSS
- —
- KEV
- No
- Class
- oss containerizable
- CWE-119
Description
An issue was discovered in the jsrsasign package before 8.0.18 for Node.js. Its RSA PKCS1 v1.5 decryption implementation does not detect ciphertext modification by prepending '\0' bytes to ciphertexts (it decrypts modified ciphertexts without error). An attacker might prepend these bytes with the goal of triggering memory corruption issues.
Search profile — drives PoC discovery
Symbols rsaDecryptPKCS1v15RSAKeypriDecdoPrivatepkcs1unpad2prepend \0 bytesciphertext modification
Keywords CVE-2020-14967jsrsasignRSA PKCS1 v1.5 decryptionnull byte prepend ciphertextjsrsasign 8.0.18kjur jsrsasignCWE-119 buffer overflow jsrsasignrsasign pocjsrsasign decrypt bypass
Versions: < 8.0.18
Ranked PoCs (17) — best first
Heuristic ranking — not yet expert-vetted. Scored on structure + provenance, not execution.
- ★ 0
- ★ 0KarthickSivalingam/jsrsasign-github needs reviewtrickest
- ★ 0Olaf0257/certificate-decode needs reviewtrickest
- ★ 0andrzejm57/certificate-decode needs reviewtrickest
- ★ 0andrzejm57/certificate-decode-javascript needs reviewtrickest
- ★ 0astreiten/jsrsasign-mod needs reviewtrickest
- ★ 0coachaac/jsrsasign-npm needs reviewtrickest
- ★ 0colaf57/certificate-decode-javascript needs reviewtrickest
- ★ 0devstar57/certificate-decode needs reviewtrickest
- ★ 0devstar57/certificate-decode-javascript needs reviewtrickest
- ★ 0diotoborg/laudantium-itaque-esse needs reviewtrickest
- ★ 0elite-devsolution/certificate-decode-javascript needs reviewtrickest
- ★ 0elitedev97/certificate-decode-javascript needs reviewtrickest
- ★ 0ericxuan57/certificate-decode-javascript needs reviewtrickest
- ★ 0f1stnpm2/nobis-minima-odio needs reviewtrickest
- ★ 0firanorg/et-non-error needs reviewtrickest
- ★ 0zibuthe7j11/repellat-sapiente-quas needs reviewtrickest
Recall-favoring discovery; ranking by the Stage-4 scorer (Adam's rubric). Scanner/aggregator repos are hidden.
Affected packages
| npm | jsrsasign | 0 → 8.0.18 |
References
- https://github.com/kjur/jsrsasign/issues/439
- https://github.com/kjur/jsrsasign/releases/tag/8.0.17
- https://github.com/kjur/jsrsasign/releases/tag/8.0.18
- https://kjur.github.io/jsrsasign/
- https://security.netapp.com/advisory/ntap-20200724-0001/
- https://www.npmjs.com/package/jsrsasign
- https://github.com/kjur/jsrsasign/issues/439
- https://github.com/kjur/jsrsasign/releases/tag/8.0.17
- https://github.com/kjur/jsrsasign/releases/tag/8.0.18
- https://kjur.github.io/jsrsasign/
- https://security.netapp.com/advisory/ntap-20200724-0001/
- https://www.npmjs.com/package/jsrsasign
Status: enriched · ingested 2026-06-22T06:00:15.000Z · profiled 2026-06-22T06:30:15.000Z