PYSEC-2019-177
See a problem?- Import Source
- https://github.com/pypa/advisory-database/blob/main/vulns/ecdsa/PYSEC-2019-177.yaml
- JSON Data
- https://api.test.osv.dev/v1/vulns/PYSEC-2019-177
- Aliases
- Published
- 2019-11-26T13:15:00Z
- Modified
- 2023-11-01T05:43:54.879924Z
- Summary
- [none]
- Details
-
An error-handling flaw was found in python-ecdsa before version 0.13.3. During signature decoding, malformed DER signatures could raise unexpected exceptions (or no exceptions at all), which could lead to a denial of service.
- References
-
- https://github.com/warner/python-ecdsa/releases/tag/python-ecdsa-0.13.3
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14853
- https://www.debian.org/security/2019/dsa-4588
- https://seclists.org/bugtraq/2019/Dec/33
- https://github.com/advisories/GHSA-2mrj-435v-c2cr
- https://github.com/advisories/GHSA-pwfw-mgfj-7g3g
Affected packages
PyPI / ecdsa
Package
- Name
- ecdsa
- View open source insights on deps.dev
- Purl
- pkg:pypi/ecdsa