Skip to content
OpenAdvisories
High DLA-1978-1 2 CVEs

python-ecdsa - security update

Published Oct 30, 2019 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 8 python-ecdsa 0.11-1+deb8u1

Vulnerabilities 2

  • High 7.4
    CVE-2019-14859

    Improper Verification of Cryptographic Signature in Pure-Python ECDSA

    A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding. Without this verification, a malformed signature could be accepted, making the signature malleable. Without proper verificatio…

    Red Hat python-ecdsa ecdsa python-ecdsa Debian Ubuntu Alpine PyPI
  • Low 3.7
    CVE-2019-14853

    ecdsa Denial of Service vulnerability in signature verification and signature malleability

    An error-handling flaw was found in python-ecdsa before version 0.13.3. During signature decoding, malformed DER signatures could raise unexpected exceptions (or no exceptions at all), which could lead to a denial of service.

    [UNKNOWN] python-ecdsa python-ecdsa python-ecdsa Debian Ubuntu Alpine PyPI