{"id":"CVE-2026-4598","state":"PUBLISHED","title":"Versions of the package jsrsasign before 11.1.1 are vulnerable to Infinite loop via the bnModInverse function in ext/jsbn2.js when the BigInteger.modInverse implementation receives","description":"Versions of the package jsrsasign before 11.1.1 are vulnerable to Infinite loop via the bnModInverse function in ext/jsbn2.js when the BigInteger.modInverse implementation receives zero or negative inputs, allowing an attacker to hang the process permanently by supplying such crafted values (e.g., modInverse(0, m) or modInverse(-1, m)).","publishedAt":"2026-03-23T05:00:11.571Z","updatedAt":"2026-09-10T12:04:56.585Z","severity":{"score":8.7,"label":"High","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P","source":"snyk"},"assigner":"snyk","products":["n/a jsrsasign","n/a org.webjars.npm:jsrsasign"],"affected":[{"vendor":"n/a","product":"jsrsasign","versions":[{"version":"0","status":"affected","lessThan":"11.1.1","versionType":"semver"}]},{"vendor":"n/a","product":"org.webjars.npm:jsrsasign","versions":[{"version":"0","status":"affected","lessThan":"*","versionType":"semver"}]}],"references":["https://security.snyk.io/vuln/SNYK-JS-JSRSASIGN-15370938","https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-15812263","https://gist.github.com/Kr0emer/a1bf5cd4547cc630d2dcc5e761de8264","https://github.com/kjur/jsrsasign/pull/648","https://github.com/kjur/jsrsasign/commit/ca5b027240287a1e71fe63019fc4400332594323","https://access.redhat.com/security/cve/CVE-2026-4598","https://bugzilla.redhat.com/show_bug.cgi?id=2450210","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4598.json","https://access.redhat.com/errata/RHSA-2026:19409","https://access.redhat.com/errata/RHSA-2026:19410","https://access.redhat.com/errata/RHSA-2026:22840","https://access.redhat.com/errata/RHSA-2026:6720","https://access.redhat.com/errata/RHSA-2026:6568","https://access.redhat.com/errata/RHSA-2026:19375","https://access.redhat.com/errata/RHSA-2026:23361"],"weaknesses":["CWE-835","CWE-1287"],"ingestedAt":"2026-10-29T20:12:16.098Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/4xxx/CVE-2026-4598.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-4598","state":"PUBLISHED","datePublished":"2026-03-23T05:00:11.571Z","dateUpdated":"2026-09-10T12:04:56.585Z","assignerShortName":"snyk","assignerOrgId":"bae035ff-b466-4ff4-94d0-fc9efd9e1730","dateReserved":"2026-03-22T16:25:51.590Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Versions of the package jsrsasign before 11.1.1 are vulnerable to Infinite loop via the bnModInverse function in ext/jsbn2.js when the BigInteger.modInverse implementation receives zero or negative inputs, allowing an attacker to hang the process permanently by supplying such crafted values (e.g., modInverse(0, m) or modInverse(-1, m))."}],"affected":[{"vendor":"n/a","product":"jsrsasign","versions":[{"version":"0","status":"affected","lessThan":"11.1.1","versionType":"semver"}]},{"vendor":"n/a","product":"org.webjars.npm:jsrsasign","versions":[{"version":"0","status":"affected","lessThan":"*","versionType":"semver"}]}],"references":[{"url":"https://security.snyk.io/vuln/SNYK-JS-JSRSASIGN-15370938"},{"url":"https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-15812263"},{"url":"https://gist.github.com/Kr0emer/a1bf5cd4547cc630d2dcc5e761de8264"},{"url":"https://github.com/kjur/jsrsasign/pull/648"},{"url":"https://github.com/kjur/jsrsasign/commit/ca5b027240287a1e71fe63019fc4400332594323"}],"metrics":[{"cvssV3_1":{"version":"3.1","attackVector":"NETWORK","attackComplexity":"LOW","exploitCodeMaturity":"PROOF_OF_CONCEPT","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P"},"cvssV4_0":{"version":"4.0","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","exploitMaturity":"PROOF_OF_CONCEPT","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","baseScore":8.7,"baseSeverity":"HIGH","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-835","description":"Infinite loop","lang":"en"}]}],"providerMetadata":{"shortName":"snyk","orgId":"bae035ff-b466-4ff4-94d0-fc9efd9e1730","dateUpdated":"2026-08-13T15:25:16.165Z"},"credits":[{"value":"Kr0emer","lang":"en"}]},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-03-23T14:37:02.606788Z","id":"CVE-2026-4598","options":[{"Exploitation":"poc"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-03-23T14:37:09.505Z"}},{"title":"jsrsasign: jsrsasign: Denial of Service via infinite loop in bnModInverse function with crafted inputs","descriptions":[{"lang":"en","value":"A flaw was found in jsrsasign. A remote attacker could exploit this vulnerability by providing specially crafted zero or negative inputs to the bnModInverse function within the BigInteger.modInverse implementation. This could lead to an infinite loop, causing a permanent denial of service (DoS) by hanging the process."}],"affected":[{"vendor":"Red Hat","product":"Migration Toolkit for Virtualization 2.1","packageName":"migration-toolkit-virtualization/mtv-console-plugin-rhel9","defaultStatus":"affected","versions":[{"version":"1779139872","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:migration_toolkit_virtualization:2.10::el9"]},{"vendor":"Red Hat","product":"Migration Toolkit for Virtualization 2.9","packageName":"migration-toolkit-virtualization/mtv-console-plugin-rhel9","defaultStatus":"affected","versions":[{"version":"1778927462","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:migration_toolkit_virtualization:2.9::el9"]},{"vendor":"Red Hat","product":"Red Hat Quay 3.10","packageName":"quay/quay-rhel8","defaultStatus":"affected","versions":[{"version":"1779822261","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:quay:3.10::el8"]},{"vendor":"Red Hat","product":"Red Hat Quay 3.12","packageName":"quay/quay-rhel8","defaultStatus":"affected","versions":[{"version":"1775253092","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:quay:3.12::el8"]},{"vendor":"Red Hat","product":"Red Hat Quay 3.15","packageName":"quay/quay-rhel8","defaultStatus":"affected","versions":[{"version":"1775169219","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:quay:3.15::el8"]},{"vendor":"Red Hat","product":"Red Hat Quay 3.16","packageName":"quay/quay-rhel9","defaultStatus":"affected","versions":[{"version":"1779204086","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:quay:3.16::el9"]},{"vendor":"Red Hat","product":"Red Hat Quay 3.9","packageName":"quay/quay-rhel8","defaultStatus":"affected","versions":[{"version":"1779811473","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:quay:3.9::el8"]}],"references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-4598","tags":["vdb-entry","x_refsource_REDHAT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2450210","name":"RHBZ#2450210","tags":["issue-tracking","x_refsource_REDHAT"]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4598.json","tags":["x_sadp-csaf-vex"]},{"url":"https://access.redhat.com/errata/RHSA-2026:19409","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:19410","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:22840","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:6720","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:6568","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:19375","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:23361","tags":["vendor-advisory","x_refsource_REDHAT"]}],"metrics":[{"other":{"content":{"namespace":"https://access.redhat.com/security/updates/classification/","value":"Important"},"type":"Red Hat severity rating"}},{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"format":"CVSS"}],"problemTypes":[{"descriptions":[{"cweId":"CWE-1287","description":"Improper Validation of Specified Type of Input","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"redhat-SADP","orgId":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","dateUpdated":"2026-09-10T12:04:56.585Z"},"datePublic":"2026-03-23T05:00:11.571Z","solutions":[{"lang":"en","value":"RHSA-2026:19409: Migration Toolkit for Virtualization 2.1"},{"lang":"en","value":"RHSA-2026:19410: Migration Toolkit for Virtualization 2.9"},{"lang":"en","value":"RHSA-2026:22840: Red Hat Quay 3.10"},{"lang":"en","value":"RHSA-2026:6720: Red Hat Quay 3.12"},{"lang":"en","value":"RHSA-2026:6568: Red Hat Quay 3.15"},{"lang":"en","value":"RHSA-2026:19375: Red Hat Quay 3.16"},{"lang":"en","value":"RHSA-2026:23361: Red Hat Quay 3.9"}],"timeline":[{"lang":"en","time":"2026-03-23T06:01:47.891Z","value":"Reported to Red Hat."},{"lang":"en","time":"2026-03-23T05:00:11.571Z","value":"Made public."}],"workarounds":[{"lang":"en","value":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."}],"x_adpType":"supplier","x_generator":{"engine":"sadp-cli 1.0.0"}}]}}}