Filtered by vendor Python-ecdsa Project Subscriptions
Filtered by product Python-ecdsa Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2019-14859 2 Python-ecdsa Project, Redhat 6 Python-ecdsa, Ceph Storage, Openstack and 3 more 2024-11-21 9.1 Critical
A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding. Without this verification, a malformed signature could be accepted, making the signature malleable. Without proper verification, an attacker could use a malleable signature to create false transactions.
CVE-2019-14853 2 Python-ecdsa Project, Redhat 3 Python-ecdsa, Satellite, Satellite Capsule 2024-11-21 7.5 High
An error-handling flaw was found in python-ecdsa before version 0.13.3. During signature decoding, malformed DER signatures could raise unexpected exceptions (or no exceptions at all), which could lead to a denial of service.