Python-ECDSA Project Python-ECDSA 0.11

CPE Details

Python-ECDSA Project Python-ECDSA 0.11
python-ecdsa_project
python-ecdsa
0.11
2019-12-13
13h04 +00:00
2019-12-13
13h04 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:python-ecdsa_project:python-ecdsa:0.11:*:*:*:*:*:*:*

Informations

Vendor

python-ecdsa_project

Product

python-ecdsa

Version

0.11

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2019-14859 2020-01-02 13h15 +00:00 A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding. Without this verification, a malformed signature could be accepted, making the signature malleable. Without proper verification, an attacker could use a malleable signature to create false transactions.
9.1
Critical
CVE-2019-14853 2019-11-26 11h06 +00:00 An error-handling flaw was found in python-ecdsa before version 0.13.3. During signature decoding, malformed DER signatures could raise unexpected exceptions (or no exceptions at all), which could lead to a denial of service.
7.5
High