Lucene search
GoogleOSV:PYSEC-2020-163HistoryJan 02, 2020 - 3:15 p.m.
PYSEC-2020-163
2020-01-0215:15:00
Google
osv.dev
10
0.002 Low
EPSS
Percentile
61.9%
A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding. Without this verification, a malformed signature could be accepted, making the signature malleable. Without proper verification, an attacker could use a malleable signature to create false transactions.
Related
nessus
nessus
EulerOS Virtualization 3.0.2.2 : python-ecdsa (EulerOS-SA-2021-2161)
2021-07-06 00:00:00
EulerOS 2.0 SP2 : python-ecdsa (EulerOS-SA-2021-2429)
2021-09-14 00:00:00
osv
osv
CVE-2019-14859
2020-01-02 15:15:11
Improper Verification of Cryptographic Signature in Pure-Python ECDSA
2020-04-01 16:35:26
python-ecdsa - security update
2019-12-17 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for python-ecdsa (EulerOS-SA-2020-1929)
2020-09-04 00:00:00
Huawei EulerOS: Security Advisory for python-ecdsa (EulerOS-SA-2020-2115)
2020-09-29 00:00:00
Huawei EulerOS: Security Advisory for python-ecdsa (EulerOS-SA-2020-1824)
2020-07-31 00:00:00
cvelist
cvelist
CVE-2019-14859
2020-01-02 14:15:58
cve
cve
CVE-2019-14859
2020-01-02 15:15:11
github
github
Improper Verification of Cryptographic Signature in Pure-Python ECDSA
2020-04-01 16:35:26
debiancve
debiancve
CVE-2019-14859
2020-01-02 15:15:11
veracode
veracode
Denial Of Service (DoS)
2019-10-14 02:27:41
alpinelinux
alpinelinux
CVE-2019-14859
2020-01-02 15:15:11
prion
prion
Design/Logic Flaw
2020-01-02 15:15:00
nvd
nvd
CVE-2019-14859
2020-01-02 15:15:11
redhatcve
redhatcve
CVE-2019-14859
2019-10-11 13:30:42
suse
suse
Security update for python-ecdsa (moderate)
2019-11-10 00:00:00
Security update for python-ecdsa (moderate)
2019-11-10 00:00:00
freebsd
freebsd
security/py-ecdsa -- multiple issues
2019-10-07 00:00:00
amazon
amazon
Important: python-ecdsa
2023-08-03 20:16:00
debian
debian
[SECURITY] [DSA 4588-1] python-ecdsa security update
2019-12-17 16:11:26
[SECURITY] [DSA 4588-1] python-ecdsa security update
2019-12-17 16:11:26
[SECURITY] [DLA 1978-1] python-ecdsa security update
2019-10-30 17:39:42
mageia
mageia
Updated python-ecdsa packages fix security vulnerabilities
2020-01-05 18:37:51
ubuntu
ubuntu
python-ecdsa vulnerabilities
2019-11-18 00:00:00
ubuntucve
ubuntucve
CVE-2019-14859
2019-10-14 00:00:00
redhat
redhat
(RHSA-2021:4702) Moderate: Satellite 6.10 Release
2021-11-16 13:58:57