HIGH🇬🇧 English

CVE-2019-14853

CVSS 7.5v3.1pub. 2019-11-26upd. 2024-11-21

An error-handling flaw was found in python-ecdsa before version 0.13.3. During signature decoding, malformed DER signatures could raise unexpected exceptions (or no exceptions at all), which could lead to a denial of service.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

  • Python Ecdsa Project Python Ecdsa

    APP
    Python-Ecdsa Project
    < 0.13.3
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
DoS
CWE
Referencje

Powiązane podatności

CVE-2019-14859CRITICAL9.1ten sam produkt

A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatu...