CVE-2019-14853

Name
CVE-2019-14853
Description
An error-handling flaw was found in python-ecdsa before version 0.13.3. During signature decoding, malformed DER signatures could raise unexpected exceptions (or no exceptions at all), which could lead to a denial of service.
NVD Severity
medium
Other trackers
CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia
Mailing lists
oss-security, full-disclosure, bugtraq
Exploits
Exploit DB, Metasploit
Forges
GitHub (code, issues), Aports (code, issues)

References

Type URI
Release Notes https://github.com/warner/python-ecdsa/releases/tag/python-ecdsa-0.13.3
Issue Tracking https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14853
DEBIAN https://www.debian.org/security/2019/dsa-4588
BUGTRAQ https://seclists.org/bugtraq/2019/Dec/33

Match rules

CPE URI Source package Min version Max version
cpe:2.3:a:python-ecdsa_project:python-ecdsa:*:*:*:*:*:*:*:* python-ecdsa >= None < 0.13.3

Vulnerable and fixed packages

Source package Branch Version Maintainer Status
py3-ecdsa edge-community 0.13.3-r0 None fixed
py3-ecdsa 3.22-community 0.13.3-r0 None fixed
py3-ecdsa 3.21-community 0.13.3-r0 None fixed
py3-ecdsa 3.20-community 0.13.3-r0 None fixed
py3-ecdsa 3.19-community 0.13.3-r0 None fixed
py3-ecdsa 3.18-community 0.13.3-r0 None fixed
py3-ecdsa 3.17-community 0.13.3-r0 None fixed