57 matches found
EUVD-2020-0078
Malware in sbrugna...
EUVD-2024-0060
Malicious code in bioql PyPI...
Heap Corruption
fastecdsa is vulnerable to Denial of Service DoS. The vulnerability is due to the curvemathmul function within curveMath.c being used and interpreted as a user-defined type without proper initialization, leading to potential arbitrary free, realloc, null pointer dereference, and other issues, as...
GHSA-PH86-G9R3-5QW4 Uninitialized Variable in fastecdsa
Versions of the package fastecdsa before 2.3.2 use an Uninitialized Variable on the stack, via the curvemathmul function in src/curveMath.c, due to being used and interpreted as user-defined type. Depending on the variable's actual value it could be arbitrary free, arbitrary realloc, null pointer...
Uninitialized Variable in fastecdsa
Versions of the package fastecdsa before 2.3.2 use an Uninitialized Variable on the stack, via the curvemathmul function in src/curveMath.c, due to being used and interpreted as user-defined type. Depending on the variable's actual value it could be arbitrary free, arbitrary realloc, null pointer...
bakers-registry (>=0.1.1, <=0.1.7), libp2p (>=0.1.5, <=0.2.7) +3 more potentially affected by CVE-2024-21502 via fastecdsa (1.7.5)
fastecdsa PYPI version 1.7.5 is affected by a known vulnerability. The following packages have a transitive dependency on fastecdsa and may be impacted: - bakers-registry =0.1.1, =0.1.5, =0.1.0, =2.0.0, =3.2.11 - trinity 0.1.0a36 Source cves: CVE-2024-21502 Source advisory: OSV:GHSA-PH86-G9R3-5QW...
bitcoinlib (>=0.5.1, <=0.6.3), empiric-network (>=0.7.3, <=1.3.1) +6 more potentially affected by CVE-2024-21502 via fastecdsa (>=2.0.0, <=2.3.0)
fastecdsa PYPI version =2.0.0, =0.5.1, =0.7.3, =3.3.0, =1.0.1, =1.0.0, =0.1.0, =0.4.3 - xchainpy-bitcoin 0.1.2 Source cves: CVE-2024-21502 Source advisory: GHSA-PH86-G9R3-5QW4...
libp2p (>=0.1.1, <=0.1.4), trinity (>=0.1.0a28, <=0.1.0a35) potentially affected by CVE-2024-21502 via fastecdsa (1.7.4)
fastecdsa PYPI version 1.7.4 is affected by a known vulnerability. The following packages have a transitive dependency on fastecdsa and may be impacted: - libp2p =0.1.1, =0.1.0a28, =0.1.0a35 Source cves: CVE-2024-21502 Source advisory: OSV:GHSA-PH86-G9R3-5QW4...
bitcoinlib (>=0.5.1, <=0.6.3), empiric-network (>=0.7.3, <=1.3.1) +6 more potentially affected by CVE-2024-21502 via fastecdsa (>=2.0.0, <=2.3.0)
fastecdsa PYPI version =2.0.0, =0.5.1, =0.7.3, =3.3.0, =1.0.1, =1.0.0, =0.1.0, =0.4.3 - xchainpy-bitcoin 0.1.2 Source cves: CVE-2024-21502 Source advisory: OSV:GHSA-PH86-G9R3-5QW4...
hep-rest-api (1.0.12) potentially affected by CVE-2024-21502 via fastecdsa (1.7.3)
fastecdsa PYPI version 1.7.3 is affected by a known vulnerability. The following packages have a transitive dependency on fastecdsa and may be impacted: - hep-rest-api 1.0.12 Source cves: CVE-2024-21502 Source advisory: OSV:GHSA-PH86-G9R3-5QW4...
django-scatter-auth (>=0.1.0, <=0.2.0) potentially affected by CVE-2024-21502 via fastecdsa (1.6.4)
fastecdsa PYPI version 1.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on fastecdsa and may be impacted: - django-scatter-auth =0.1.0, =0.2.0 Source cves: CVE-2024-21502 Source advisory: OSV:GHSA-PH86-G9R3-5QW4...
CVE-2024-21502
Versions of the package fastecdsa before 2.3.2 are vulnerable to Use of Uninitialized Variable on the stack, via the curvemathmul function in src/curveMath.c, due to being used and interpreted as user-defined type. Depending on the variable's actual value it could be arbitrary free, arbitrary...
PYSEC-2024-39
Versions of the package fastecdsa before 2.3.2 are vulnerable to Use of Uninitialized Variable on the stack, via the curvemathmul function in src/curveMath.c, due to being used and interpreted as user-defined type. Depending on the variable's actual value it could be arbitrary free, arbitrary...
Null pointer dereference
Versions of the package fastecdsa before 2.3.2 are vulnerable to Use of Uninitialized Variable on the stack, via the curvemathmul function in src/curveMath.c, due to being used and interpreted as user-defined type. Depending on the variable's actual value it could be arbitrary free, arbitrary...
PYSEC-2024-39
Versions of the package fastecdsa before 2.3.2 are vulnerable to Use of Uninitialized Variable on the stack, via the curvemathmul function in src/curveMath.c, due to being used and interpreted as user-defined type. Depending on the variable's actual value it could be arbitrary free, arbitrary...
bitcoinlib (>=0.5.1, <=0.6.3), empiric-network (>=0.7.3, <=1.3.1) +6 more potentially affected by CVE-2024-21502 via fastecdsa (>=2.0.0, <=2.3.0)
fastecdsa PYPI version =2.0.0, =0.5.1, =0.7.3, =3.3.0, =1.0.1, =1.0.0, =0.1.0, =0.4.3 - xchainpy-bitcoin 0.1.2 Source cves: CVE-2024-21502 Source advisory: OSV:PYSEC-2024-39...
libp2p (>=0.1.1, <=0.1.4), trinity (>=0.1.0a28, <=0.1.0a35) potentially affected by CVE-2024-21502 via fastecdsa (1.7.4)
fastecdsa PYPI version 1.7.4 is affected by a known vulnerability. The following packages have a transitive dependency on fastecdsa and may be impacted: - libp2p =0.1.1, =0.1.0a28, =0.1.0a35 Source cves: CVE-2024-21502 Source advisory: OSV:PYSEC-2024-39...
hep-rest-api (1.0.12) potentially affected by CVE-2024-21502 via fastecdsa (1.7.3)
fastecdsa PYPI version 1.7.3 is affected by a known vulnerability. The following packages have a transitive dependency on fastecdsa and may be impacted: - hep-rest-api 1.0.12 Source cves: CVE-2024-21502 Source advisory: OSV:PYSEC-2024-39...
django-scatter-auth (>=0.1.0, <=0.2.0) potentially affected by CVE-2024-21502 via fastecdsa (1.6.4)
fastecdsa PYPI version 1.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on fastecdsa and may be impacted: - django-scatter-auth =0.1.0, =0.2.0 Source cves: CVE-2024-21502 Source advisory: OSV:PYSEC-2024-39...
bakers-registry (>=0.1.1, <=0.1.7), libp2p (>=0.1.5, <=0.2.7) +3 more potentially affected by CVE-2024-21502 via fastecdsa (1.7.5)
fastecdsa PYPI version 1.7.5 is affected by a known vulnerability. The following packages have a transitive dependency on fastecdsa and may be impacted: - bakers-registry =0.1.1, =0.1.5, =0.1.0, =2.0.0, =3.2.11 - trinity 0.1.0a36 Source cves: CVE-2024-21502 Source advisory: OSV:PYSEC-2024-39...