Lucene search
K

117 matches found

BDU FSTEC
BDU FSTEC
added 2020/04/14 12:0 a.m.1 views

The vulnerability of the Python ECDSA cryptographic library, related to improper verification of the cryptographic signature, allows a perpetrator to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Python ECDSA cryptographic library is related to improper verification of the cryptographic signature. Exploiting this vulnerability could allow a malicious actor, operating remotely, to compromise the confidentiality and integrity of the protected information...

9.4CVSS6.9AI score0.01596EPSS
Exploits1References9Affected Software12
OSV
OSV
added 2020/04/01 4:35 p.m.0 views

GHSA-8QXJ-F9RH-9FG2 Improper Verification of Cryptographic Signature in Pure-Python ECDSA

A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding. Without this verification, a malformed signature could be accepted, making the signature malleable. Without proper verification, an attacker could use a malleable...

9.3CVSS5.8AI score0.01596EPSS
Exploits1References12
Github Security Blog
Github Security Blog
added 2020/04/01 4:35 p.m.89 views

Improper Verification of Cryptographic Signature in Pure-Python ECDSA

A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding. Without this verification, a malformed signature could be accepted, making the signature malleable. Without proper verification, an attacker could use a malleable...

9.1CVSS2.8AI score0.01596EPSS
Exploits1References11Affected Software1
OpenVAS
OpenVAS
added 2020/01/09 12:0 a.m.46 views

openSUSE: Security Advisory for python-ecdsa (openSUSE-SU-2019:2474-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.1CVSS8.7AI score0.02505EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2020/01/09 12:0 a.m.24 views

Fedora Update for python-ecdsa FEDORA-2019-55e04129ac

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS8.5AI score0.02505EPSS
Exploits0References2
OSV
OSV
added 2020/01/05 3:37 p.m.6 views

MGASA-2020-0002 Updated python-ecdsa packages fix security vulnerabilities

Updated python-ecdsa packages fix security vulnerabilities: It was discovered that python-ecdsa incorrectly handled certain signatures. A remote attacker could possibly use this issue to cause python-ecdsa to generate unexpected exceptions, resulting in a denial of service CVE-2019-14853. It was...

9.1CVSS8.3AI score0.02505EPSS
Exploits1References3
Mageia
Mageia
added 2020/01/05 3:37 p.m.73 views

Updated python-ecdsa packages fix security vulnerabilities

Updated python-ecdsa packages fix security vulnerabilities: It was discovered that python-ecdsa incorrectly handled certain signatures. A remote attacker could possibly use this issue to cause python-ecdsa to generate unexpected exceptions, resulting in a denial of service CVE-2019-14853. It was...

9.1CVSS2.2AI score0.02505EPSS
Exploits1References2
NVD
NVD
added 2020/01/02 3:15 p.m.17 views

CVE-2019-14859

A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding. Without this verification, a malformed signature could be accepted, making the signature malleable. Without proper verification, an attacker could use a malleable...

9.1CVSS8AI score0.01596EPSS
Exploits1References4
OSV
OSV
added 2020/01/02 3:15 p.m.2 views

DEBIAN-CVE-2019-14859

A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding. Without this verification, a malformed signature could be accepted, making the signature malleable. Without proper verification, an attacker could use a malleable...

9.1CVSS6.9AI score0.01596EPSS
Exploits1References1
PyPA
PyPA
added 2020/01/02 3:15 p.m.7 views

PYSEC-2020-163

A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding. Without this verification, a malformed signature could be accepted, making the signature malleable. Without proper verification, an attacker could use a malleable...

9.1CVSS6.5AI score0.01596EPSS
Exploits1References5Affected Software1
Prion
Prion
added 2020/01/02 3:15 p.m.21 views

Design/Logic Flaw

A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding. Without this verification, a malformed signature could be accepted, making the signature malleable. Without proper verification, an attacker could use a malleable...

6.4CVSS8.7AI score0.01596EPSS
Exploits1References4Affected Software4
OSV
OSV
added 2020/01/02 3:15 p.m.1 views

PYSEC-2020-163

A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding. Without this verification, a malformed signature could be accepted, making the signature malleable. Without proper verification, an attacker could use a malleable...

9.1CVSS6.8AI score0.01596EPSS
Exploits1References5
Cvelist
Cvelist
added 2020/01/02 2:15 p.m.24 views

CVE-2019-14859

A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding. Without this verification, a malformed signature could be accepted, making the signature malleable. Without proper verification, an attacker could use a malleable...

7.4CVSS8.9AI score0.01596EPSS
Exploits1References4
CVE
CVE
added 2020/01/02 2:15 p.m.226 views

CVE-2019-14859

CVE-2019-14859 affects the Python library python-ecdsa. A flaw exists in all versions before 0.13.3 where signatures are not properly verified for DER encoding, allowing a malformed signature to be accepted and making signatures malleable. This could enable an attacker to use a malleable signatur...

9.1CVSS8.8AI score0.01596EPSS
Exploits1References4Affected Software1
Debian CVE
Debian CVE
added 2020/01/02 2:15 p.m.33 views

CVE-2019-14859

A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding. Without this verification, a malformed signature could be accepted, making the signature malleable. Without proper verification, an attacker could use a malleable...

9.1CVSS7.4AI score0.01596EPSS
Exploits1
AlpineLinux
AlpineLinux
added 2020/01/02 2:15 p.m.26 views

CVE-2019-14859

A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding. Without this verification, a malformed signature could be accepted, making the signature malleable. Without proper verification, an attacker could use a malleable...

9.1CVSS9.1AI score0.01596EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2019/12/18 12:0 a.m.33 views

Debian DSA-4588-1 : python-ecdsa - security update

It was discovered that python-ecdsa, a cryptographic signature library for Python, incorrectly handled certain signatures. A remote attacker could use this issue to cause python-ecdsa to either not warn about incorrect signatures, or generate exceptions resulting in a denial-of-service. C Tenable...

9.1CVSS6.3AI score0.02505EPSS
Exploits1References6
OpenVAS
OpenVAS
added 2019/12/18 12:0 a.m.41 views

Debian: Security Advisory (DSA-4588-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.1CVSS8.5AI score0.02505EPSS
Exploits1References4
Debian
Debian
added 2019/12/17 4:11 p.m.25 views

[SECURITY] [DSA 4588-1] python-ecdsa security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4588-1 [email protected] https://www.debian.org/security/ Sebastien Delafond December 17, 2019 https://www.debian.org/security/faq -...

6.4CVSS1.4AI score0.02505EPSS
Exploits1
Debian
Debian
added 2019/12/17 4:11 p.m.44 views

[SECURITY] [DSA 4588-1] python-ecdsa security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4588-1 [email protected] https://www.debian.org/security/ Sebastien Delafond December 17, 2019 https://www.debian.org/security/faq -...

9.1CVSS7.8AI score0.02505EPSS
Exploits1
Rows per page
Query Builder