Lucene search
K

19 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2020-0076

Malware in sbrugna...

9.1CVSS7.5AI score0.00072EPSS
Exploits1References17
SUSE CVE
SUSE CVE
added 2023/02/15 4:9 a.m.3 views

SUSE CVE-2019-14859

A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding. Without this verification, a malformed signature could be accepted, making the signature malleable. Without proper verification, an attacker could use a malleable...

6.8CVSS6.5AI score0.00072EPSS
Exploits1References18
RedHat Linux
RedHat Linux
added 2021/11/16 3:43 p.m.4 views

python-ecdsa: DER encoding is not being verified in signatures

A flaw was found in python-ecdsa, where it did not correctly verify whether signatures used DER encoding. Without this verification, a malformed signature could be accepted, making the signature malleable. Without proper verification, an attacker could use a malleable signature to create false...

9.1CVSS5.7AI score0.00072EPSS
Exploits1References6
Tenable Nessus
Tenable Nessus
added 2021/09/14 12:0 a.m.36 views

EulerOS 2.0 SP2 : python-ecdsa (EulerOS-SA-2021-2429)

According to the version of the python-ecdsa package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding. Without...

9.1CVSS6.9AI score0.00072EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2020/06/26 12:0 a.m.36 views

Huawei EulerOS: Security Advisory for python2-ecdsa (EulerOS-SA-2020-1711)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.1CVSS9.3AI score0.00072EPSS
Exploits1References2
OSV
OSV
added 2020/04/01 4:35 p.m.0 views

GHSA-8QXJ-F9RH-9FG2 Improper Verification of Cryptographic Signature in Pure-Python ECDSA

A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding. Without this verification, a malformed signature could be accepted, making the signature malleable. Without proper verification, an attacker could use a malleable...

9.3CVSS5.8AI score0.00072EPSS
Exploits1References12
Github Security Blog
Github Security Blog
added 2020/04/01 4:35 p.m.88 views

Improper Verification of Cryptographic Signature in Pure-Python ECDSA

A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding. Without this verification, a malformed signature could be accepted, making the signature malleable. Without proper verification, an attacker could use a malleable...

9.1CVSS2.8AI score0.00072EPSS
Exploits1References11Affected Software1
OSV
OSV
added 2020/01/02 3:15 p.m.1 views

DEBIAN-CVE-2019-14859

A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding. Without this verification, a malformed signature could be accepted, making the signature malleable. Without proper verification, an attacker could use a malleable...

9.1CVSS6.9AI score0.00072EPSS
Exploits1References1
NVD
NVD
added 2020/01/02 3:15 p.m.16 views

CVE-2019-14859

A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding. Without this verification, a malformed signature could be accepted, making the signature malleable. Without proper verification, an attacker could use a malleable...

9.1CVSS8AI score0.00072EPSS
Exploits1References4
OSV
OSV
added 2020/01/02 3:15 p.m.0 views

PYSEC-2020-163

A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding. Without this verification, a malformed signature could be accepted, making the signature malleable. Without proper verification, an attacker could use a malleable...

9.1CVSS6.8AI score0.00072EPSS
Exploits1References5
PyPA
PyPA
added 2020/01/02 3:15 p.m.5 views

PYSEC-2020-163

A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding. Without this verification, a malformed signature could be accepted, making the signature malleable. Without proper verification, an attacker could use a malleable...

9.1CVSS6.5AI score0.00072EPSS
Exploits1References5Affected Software1
Prion
Prion
added 2020/01/02 3:15 p.m.20 views

Design/Logic Flaw

A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding. Without this verification, a malformed signature could be accepted, making the signature malleable. Without proper verification, an attacker could use a malleable...

6.4CVSS8.7AI score0.00072EPSS
Exploits1References4Affected Software4
OSV
OSV
added 2020/01/02 3:15 p.m.0 views

PYSEC-2020-182

A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding. Without this verification, a malformed signature could be accepted, making the signature malleable. Without proper verification, an attacker could use a malleable...

9.1CVSS6.8AI score0.00072EPSS
Exploits1References4
CVE
CVE
added 2020/01/02 2:15 p.m.218 views

CVE-2019-14859

CVE-2019-14859 affects the Python library python-ecdsa. A flaw exists in all versions before 0.13.3 where signatures are not properly verified for DER encoding, allowing a malformed signature to be accepted and making signatures malleable. This could enable an attacker to use a malleable signatur...

9.1CVSS8.8AI score0.00072EPSS
Exploits1References4Affected Software1
AlpineLinux
AlpineLinux
added 2020/01/02 2:15 p.m.24 views

CVE-2019-14859

A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding. Without this verification, a malformed signature could be accepted, making the signature malleable. Without proper verification, an attacker could use a malleable...

9.1CVSS9.1AI score0.00072EPSS
Exploits1
Debian CVE
Debian CVE
added 2020/01/02 2:15 p.m.32 views

CVE-2019-14859

A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding. Without this verification, a malformed signature could be accepted, making the signature malleable. Without proper verification, an attacker could use a malleable...

9.1CVSS7.4AI score0.00072EPSS
Exploits1
Cvelist
Cvelist
added 2020/01/02 2:15 p.m.22 views

CVE-2019-14859

A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding. Without this verification, a malformed signature could be accepted, making the signature malleable. Without proper verification, an attacker could use a malleable...

7.4CVSS8.9AI score0.00072EPSS
Exploits1References4
UbuntuCve
UbuntuCve
added 2019/10/14 12:0 a.m.21 views

CVE-2019-14859

A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding. Without this verification, a malformed signature could be accepted, making the signature malleable. Without proper verification, an attacker could use a malleable...

9.1CVSS6.8AI score0.00072EPSS
Exploits1References5
RedhatCVE
RedhatCVE
added 2019/10/11 1:30 p.m.22 views

CVE-2019-14859

A flaw was found in python-ecdsa, where it did not correctly verify whether signatures used DER encoding. Without this verification, a malformed signature could be accepted, making the signature malleable. Without proper verification, an attacker could use a malleable signature to create false...

9.1CVSS1.9AI score0.00072EPSS
Exploits1References5
Rows per page
Query Builder