CVE-2019-14853

CVE-2019-14853 affects the Python package python-ecdsa : before version 0.13.3, during DER signature decoding an error-handling flaw could raise unexpected exceptions (or none), enabling a potential denial of service. Affected versions: all before 0.13.3. Connected advisories confirm the root cau...

CVE-2019-14859

CVE-2019-14859 affects the Python library python-ecdsa. A flaw exists in all versions before 0.13.3 where signatures are not properly verified for DER encoding, allowing a malformed signature to be accepted and making signatures malleable. This could enable an attacker to use a malleable signatur...