CVE-2019-14853

An error-handling flaw was found in python-ecdsa before version 0.13.3. During signature decoding, malformed DER signatures could raise unexpected exceptions (or no exceptions at all), which could lead to a denial of service.

References

Affected packages

Git / github.com/tlsfuzzer/python-ecdsa

Affected ranges

Type

GIT

Repo

https://github.com/tlsfuzzer/python-ecdsa

Events

Introduced

Fixed

7add2213c992f51267eed8288b560f3f4108a28d

Database specific

Show details

{
    "extracted_events": [
        {
            "cpe": "cpe:2.3:a:python-ecdsa_project:python-ecdsa:*:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "0"
                },
                {
                    "fixed": "0.13.3"
                }
            ],
            "source": "CPE_RANGE"
        },
        {
            "original_tag": "python-ecdsa-0.13.3",
            "range": [
                {
                    "fixed": "7add2213c992f51267eed8288b560f3f4108a28d"
                }
            ],
            "source": "REFERENCES_TAG"
        }
    ]
}

Affected versions

python-ecdsa-0.*

python-ecdsa-0.10

python-ecdsa-0.11

python-ecdsa-0.12

python-ecdsa-0.13

python-ecdsa-0.13.1

python-ecdsa-0.13.2

python-ecdsa-0.5

python-ecdsa-0.6

python-ecdsa-0.7

python-ecdsa-0.8

python-ecdsa-0.9

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2019-14853.json"