Skip to content
CVE PROGRAM SOURCE RECORD7.4 High

CVE-2024-23342

python-ecdsa vulnerable to Minerva attack on P-256

Description

The `ecdsa` PyPI package is a pure Python implementation of ECC (Elliptic Curve Cryptography) with support for ECDSA (Elliptic Curve Digital Signature Algorithm), EdDSA (Edwards-curve Digital Signature Algorithm) and ECDH (Elliptic Curve Diffie-Hellman). Versions 0.18.0 and prior are vulnerable to the Minerva attack. As of time of publication, no known patched version exists.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

tlsfuzzer python-ecdsa

  • <= 0.18.0affected

References