CVE-2019-14853
HIGHPython-ecdsa < 0.13.3 - Denial of Service
Title source: ruleDescription
An error-handling flaw was found in python-ecdsa before version 0.13.3. During signature decoding, malformed DER signatures could raise unexpected exceptions (or no exceptions at all), which could lead to a denial of service.
References (4)
Scores
CVSS v3
7.5
EPSS
0.0007
EPSS Percentile
20.8%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Classification
CWE
CWE-755
CWE-391
Status
published
Affected Products (2)
python-ecdsa_project/python-ecdsa
< 0.13.3
pypi/ecdsa
< 0.13.3PyPI
Timeline
Published
Nov 26, 2019
Tracked Since
Feb 18, 2026