Ecosyste.ms: Advisories

Security Advisories: MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTJtcmotNDM1di1jMmNy

Duplicate Advisory: possible DoS caused by malformed signature decoding in Pure-Python ECDSA

Duplicate Advisory

This advisory has been withdrawn because it is a duplicate of GHSA-pwfw-mgfj-7g3g. This link is maintained to preserve external references.

Permalink: https://github.com/advisories/GHSA-2mrj-435v-c2cr
JSON: https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTJtcmotNDM1di1jMmNy
Source: GitHub Advisory Database
Origin: Unspecified
Severity: Moderate
Classification: General
Published: almost 5 years ago
Updated: 23 days ago

Widthdrawn: over 4 years ago

Identifiers: GHSA-2mrj-435v-c2cr
References:

• https://nvd.nist.gov/vuln/detail/CVE-2019-14853
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14853
• https://github.com/warner/python-ecdsa/releases/tag/python-ecdsa-0.13.3
• https://seclists.org/bugtraq/2019/Dec/33
• https://www.debian.org/security/2019/dsa-4588
• https://github.com/advisories/GHSA-2mrj-435v-c2cr
• https://github.com/advisories/GHSA-pwfw-mgfj-7g3g
• https://github.com/pypa/advisory-database/tree/main/vulns/ecdsa/PYSEC-2019-177.yaml

Repository: https://github.com/warner/python-ecdsa
Blast Radius: 0.0

Affected Packages