Python Ecdsa Project Python Ecdsa vulnerabilities
2 vulnerabilities
Known vulnerabilities in Python Ecdsa Project Python Ecdsa, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
PrioritiseCVE-2019-14859red hat · python-ecdsa +8 morered hat python-ecdsaA flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding. Without this verification, a malformed signature could be accepted, making the signature malleable. Without proper verification, an attacker could use a malleable signature to create false transactions.CVSS9.1CriticalEPSS1.53%RoutineCVE-2019-14853[unknown] · python-ecdsa +5 more[unknown] python-ecdsaAn error-handling flaw was found in python-ecdsa before version 0.13.3. During signature decoding, malformed DER signatures could raise unexpected exceptions (or no exceptions at all), which could lead to a denial of service.CVSS7.5HighEPSS2.41%