CVE-2019-14853 describes an error-handling flaw in python-ecdsa versions prior to 0.13.3, specifically affecting the python-ecdsa_project. This vulnerability allows an unauthenticated attacker to trigger unexpected exceptions or no exceptions at all during signature decoding of malformed DER signatures. With a CVSS score of 7.5 (High), this flaw could lead to a denial of service (DoS) due to its low attack complexity and network-based vector. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 0.13.3CPE matchmatch criteria | cpe:2.3:a:python-ecdsa_project:python-ecdsa:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.