Lucene search
+L

119 matches found

Tenable Nessus
Tenable Nessus
added 2020/06/25 12:0 a.m.34 views

EulerOS Virtualization for ARM 64 3.0.6.0 : python2-ecdsa (EulerOS-SA-2020-1711)

According to the version of the python2-ecdsa package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - A flaw was found in python-ecdsa, where it did not correctly verify whether signatures used DER encoding. Without...

9.1CVSS6.8AI score0.01596EPSS
Exploits1References2
BDU FSTEC
BDU FSTEC
added 2020/04/23 12:0 a.m.12 views

The vulnerability of the Python ECDSA cryptographic library, related to insufficient processing of exceptional states, allows a perpetrator to trigger a service failure.

The vulnerability of the Python ECDSA cryptographic library involves simultaneous operations using a shared resource with incorrect synchronization. Exploiting this vulnerability can allow a remote attacker to cause service failures...

3.6CVSS6.5AI score0.0051EPSS
Exploits0References16Affected Software10
BDU FSTEC
BDU FSTEC
added 2020/04/14 12:0 a.m.6 views

The vulnerability of the Python ECDSA cryptographic library, related to improper verification of the cryptographic signature, allows a perpetrator to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Python ECDSA cryptographic library is related to improper verification of the cryptographic signature. Exploiting this vulnerability could allow a malicious actor, operating remotely, to compromise the confidentiality and integrity of the protected information...

9.4CVSS6.9AI score0.01596EPSS
Exploits1References9Affected Software12
Github Security Blog
Github Security Blog
added 2020/04/01 4:35 p.m.91 views

Improper Verification of Cryptographic Signature in Pure-Python ECDSA

A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding. Without this verification, a malformed signature could be accepted, making the signature malleable. Without proper verification, an attacker could use a malleable...

9.1CVSS2.8AI score0.01596EPSS
Exploits1References11Affected Software1
OSV
OSV
added 2020/04/01 4:35 p.m.6 views

GHSA-8QXJ-F9RH-9FG2 Improper Verification of Cryptographic Signature in Pure-Python ECDSA

A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding. Without this verification, a malformed signature could be accepted, making the signature malleable. Without proper verification, an attacker could use a malleable...

9.3CVSS5.8AI score0.01596EPSS
Exploits1References12
OpenVAS
OpenVAS
added 2020/01/09 12:0 a.m.25 views

Fedora Update for python-ecdsa FEDORA-2019-55e04129ac

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS8.5AI score0.02505EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2020/01/09 12:0 a.m.47 views

openSUSE: Security Advisory for python-ecdsa (openSUSE-SU-2019:2474-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.1CVSS8.7AI score0.02505EPSS
Exploits1References2
Mageia
Mageia
added 2020/01/05 3:37 p.m.75 views

Updated python-ecdsa packages fix security vulnerabilities

Updated python-ecdsa packages fix security vulnerabilities: It was discovered that python-ecdsa incorrectly handled certain signatures. A remote attacker could possibly use this issue to cause python-ecdsa to generate unexpected exceptions, resulting in a denial of service CVE-2019-14853. It was...

9.1CVSS2.2AI score0.02505EPSS
Exploits1References2
OSV
OSV
added 2020/01/05 3:37 p.m.8 views

MGASA-2020-0002 Updated python-ecdsa packages fix security vulnerabilities

Updated python-ecdsa packages fix security vulnerabilities: It was discovered that python-ecdsa incorrectly handled certain signatures. A remote attacker could possibly use this issue to cause python-ecdsa to generate unexpected exceptions, resulting in a denial of service CVE-2019-14853. It was...

9.1CVSS8.3AI score0.02505EPSS
Exploits1References3
NVD
NVD
added 2020/01/02 3:15 p.m.20 views

CVE-2019-14859

A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding. Without this verification, a malformed signature could be accepted, making the signature malleable. Without proper verification, an attacker could use a malleable...

9.1CVSS8AI score0.01596EPSS
Exploits1References4
OSV
OSV
added 2020/01/02 3:15 p.m.3 views

DEBIAN-CVE-2019-14859

A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding. Without this verification, a malformed signature could be accepted, making the signature malleable. Without proper verification, an attacker could use a malleable...

9.1CVSS6.9AI score0.01596EPSS
Exploits1References1
Prion
Prion
added 2020/01/02 3:15 p.m.23 views

Design/Logic Flaw

A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding. Without this verification, a malformed signature could be accepted, making the signature malleable. Without proper verification, an attacker could use a malleable...

6.4CVSS8.7AI score0.01596EPSS
Exploits1References4Affected Software4
OSV
OSV
added 2020/01/02 3:15 p.m.6 views

PYSEC-2020-163

A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding. Without this verification, a malformed signature could be accepted, making the signature malleable. Without proper verification, an attacker could use a malleable...

9.1CVSS6.8AI score0.01596EPSS
Exploits1References5
PyPA
PyPA
added 2020/01/02 3:15 p.m.10 views

PYSEC-2020-163

A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding. Without this verification, a malformed signature could be accepted, making the signature malleable. Without proper verification, an attacker could use a malleable...

9.1CVSS6.5AI score0.01596EPSS
Exploits1References5Affected Software1
AlpineLinux
AlpineLinux
added 2020/01/02 2:15 p.m.35 views

CVE-2019-14859

A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding. Without this verification, a malformed signature could be accepted, making the signature malleable. Without proper verification, an attacker could use a malleable...

9.1CVSS9.1AI score0.01596EPSS
Exploits1
Cvelist
Cvelist
added 2020/01/02 2:15 p.m.29 views

CVE-2019-14859

A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding. Without this verification, a malformed signature could be accepted, making the signature malleable. Without proper verification, an attacker could use a malleable...

7.4CVSS8.9AI score0.01596EPSS
Exploits1References4
CVE
CVE
added 2020/01/02 2:15 p.m.234 views

CVE-2019-14859

CVE-2019-14859 affects the Python library python-ecdsa. A flaw exists in all versions before 0.13.3 where signatures are not properly verified for DER encoding, allowing a malformed signature to be accepted and making signatures malleable. This could enable an attacker to use a malleable signatur...

9.1CVSS8.8AI score0.01596EPSS
Exploits1References4Affected Software1
Debian CVE
Debian CVE
added 2020/01/02 2:15 p.m.40 views

CVE-2019-14859

A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding. Without this verification, a malformed signature could be accepted, making the signature malleable. Without proper verification, an attacker could use a malleable...

9.1CVSS7.4AI score0.01596EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2019/12/18 12:0 a.m.40 views

Debian DSA-4588-1 : python-ecdsa - security update

It was discovered that python-ecdsa, a cryptographic signature library for Python, incorrectly handled certain signatures. A remote attacker could use this issue to cause python-ecdsa to either not warn about incorrect signatures, or generate exceptions resulting in a denial-of-service. C Tenable...

9.1CVSS6.3AI score0.02505EPSS
Exploits1References6
OpenVAS
OpenVAS
added 2019/12/18 12:0 a.m.43 views

Debian: Security Advisory (DSA-4588-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.1CVSS8.5AI score0.02505EPSS
Exploits1References4
Rows per page
Query Builder