Skip to content
OpenAdvisories

Package · Alpine

py3-ecdsa

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 7.4
    CVE-2019-14859

    Improper Verification of Cryptographic Signature in Pure-Python ECDSA

    A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding. Without this verification, a malformed signature could be accepted, making the signature malleable. Without proper verificatio…

    Red Hat python-ecdsa ecdsa python-ecdsa Debian Ubuntu Alpine PyPI
  • Low 3.7
    CVE-2019-14853

    ecdsa Denial of Service vulnerability in signature verification and signature malleability

    An error-handling flaw was found in python-ecdsa before version 0.13.3. During signature decoding, malformed DER signatures could raise unexpected exceptions (or no exceptions at all), which could lead to a denial of service.

    [UNKNOWN] python-ecdsa python-ecdsa python-ecdsa Debian Ubuntu Alpine PyPI