CVE-2024-23342: python-ecdsa vulnerable to Minerva attack on P-256
Vulnerability summary
CVE-2024-23342 is a high (CVSS 7.4) Observable Discrepancy vulnerability in tlsfuzzer ecdsa. EPSS estimates a 0.98% chance of exploitation in the next 30 days, higher than 62.4% of scored vulnerabilities. 1 public exploit is recorded.
Public exploit (GitHub, Date unknown)
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 2 · Related 1Timeline
- 22-01-2024PublishedVulnerability first disclosed.
- 30-05-2025Last modifiedVulnerability information updated.
Description
The `ecdsa` PyPI package is a pure Python implementation of ECC (Elliptic Curve Cryptography) with support for ECDSA (Elliptic Curve Digital Signature Algorithm), EdDSA (Edwards-curve Digital Signature Algorithm) and ECDH (Elliptic Curve Diffie-Hellman). Versions 0.18.0 and prior are vulnerable to the Minerva attack. As of time of publication, no known patched version exists.
CVSS metrics
7 scores · 7 sources · 1 version- OSV · PypiEcosystem advisory · calculated7.4HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
- OSV · UbuntuEcosystem advisory · calculated7.4HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
- OSV · DebianEcosystem advisory · calculated7.4HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
- OSV · WolfiEcosystem advisory · calculated7.4HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
- OSV · ChainguardEcosystem advisory · calculated7.4HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
- NVDNIST7.4HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
EPSS trend
Probability
0.98%
Chance of exploitation in the next 30 days
Percentile
62%
Versus all other CVEs
30-day change
No change 0.00 pp
From 0.98% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
1 foundPython Ecdsa
Maturity: poc
Weaknesses
CWE · root cause- CWE-203Observable DiscrepancyThe product behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor.
- CWE-208Observable Timing DiscrepancyTwo separate operations in a product require different amounts of time to complete, in a way that is observable to an actor and reveals security-relevant information about the state of the product, such as whether a particular operation was successful or not.
- CWE-385Covert Timing ChannelCovert timing channels convey information by modulating some aspect of system behavior over time, so that the program receiving the information can observe system behavior and infer protected information.
Affected systems
Known conditions: network-reachable, no authentication, no user interaction (CVSS vector). Other conditions: not stated in public data.
Chainguard9 products
- airflow-2< 2.11.2-r5 | All versions (No fix recorded)
- airflow-2-bitnami-compatAll versions (No fix recorded)
- airflow-3< 3.2.2-r0
- airflow-3-bitnami-compatAll versions (No fix recorded)
- awx< 24.6.1-r33
Wolfi4 products
- airflow-3< 3.2.2-r0
- airflow-3-bitnami-compatAll versions (No fix recorded)
- checkovAll versions (No fix recorded)
- open-webui< 0.11.0-r0
Tlsfuzzer2 products
- ecdsa≤ 0.18.0
- python-ecdsa≤ 0.18.0
Debian1 product
- python-ecdsaAll versions (No fix recorded)
PyPI1 product
- ecdsaAll versions (No fix recorded)
Ubuntu1 product
- python-ecdsaAll versions (No fix recorded)
6 vendors · 18 products
References
14 links- github.com/tlsfuzzer/python-ecdsa/security/advisories/GHSA-wj6h-64fc-37mpX Refsource CONFIRMWEBREPORTAdvisoryExploitVendor Advisory
- securitypitfalls.wordpress.com/2018/08/03/constant-time-compare-in-python/X Refsource MISCREPORTWEBTechnical Description
- pypi.org/project/ecdsaPACKAGE
