Vulnerabilities
Misconfiguration
Runtime Security
Compliance
CVE Vulnerabilities

CVE-2019-14853

Improper Handling of Exceptional Conditions

Published: Nov 26, 2019 | Modified: Dec 17, 2019
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:N/I:N/A:P
RedHat/V2
RedHat/V3
3.7 LOW
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Ubuntu
LOW
Additional information
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2019-14853
CWEhttps://cwe.mitre.org/data/definitions/755.html

An error-handling flaw was found in python-ecdsa before version 0.13.3. During signature decoding, malformed DER signatures could raise unexpected exceptions (or no exceptions at all), which could lead to a denial of service.

Weakness

The product does not handle or incorrectly handles an exceptional condition.

Affected Software

Name Vendor Start Version End Version
Python-ecdsa Python-ecdsa_project * 0.13.3 (excluding)
Red Hat Satellite 6.10 for RHEL 7 RedHat python-ecdsa-0:0.13.3-2.el7pc *
Red Hat Satellite 6.10 for RHEL 7 RedHat python-ecdsa-0:0.13.3-2.el7pc *
Python-ecdsa Ubuntu bionic *
Python-ecdsa Ubuntu disco *
Python-ecdsa Ubuntu eoan *
Python-ecdsa Ubuntu trusty *
Python-ecdsa Ubuntu upstream *
Python-ecdsa Ubuntu xenial *

References

Aqua Security is the largest pure-play cloud native security company, providing customers the freedom to innovate and run their businesses with minimal friction. The Aqua Cloud Native Security Platform provides prevention, detection, and response automation across the entire application lifecycle to secure the build, secure cloud infrastructure and secure running workloads wherever they are deployed.
Copyright © 2024 Aqua Security Software Ltd.   Privacy Policy | Terms of Use