Skip to content
OpenAdvisories
High DSA-4588-1 2 CVEs

python-ecdsa - security update

Published Dec 17, 2019 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

ReleasePackageFixed in
Debian · 10 python-ecdsa 0.13-3+deb10u1
Debian · 9 python-ecdsa 0.13-2+deb9u1

Vulnerabilities 2

  • High 7.4
    CVE-2019-14859

    Improper Verification of Cryptographic Signature in Pure-Python ECDSA

    A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding. Without this verification, a malformed signature could be accepted, making the signature malleable. Without proper verificatio…

    Red Hat python-ecdsa ecdsa python-ecdsa Debian Ubuntu Alpine PyPI
  • Low 3.7
    CVE-2019-14853

    ecdsa Denial of Service vulnerability in signature verification and signature malleability

    An error-handling flaw was found in python-ecdsa before version 0.13.3. During signature decoding, malformed DER signatures could raise unexpected exceptions (or no exceptions at all), which could lead to a denial of service.

    [UNKNOWN] python-ecdsa python-ecdsa python-ecdsa Debian Ubuntu Alpine PyPI