CVE:CVE-2019-14859
CNNVD:CNNVD-201910-1855
python-ecdsa是一款基于Python的签名验证插件。
python-ecdsa 0.13.3之前版本中存在安全漏洞。攻击者可利用该漏洞获取敏感信息。
solution:Upgrade python-ecdsa_project python-ecdsa to a higher version than 0.13.3,and avoid the version (,0.13.3); Upgrade redhat ceph_storage to a higher version than 2.0,3.0,and avoid the version 2.0,3.0; Upgrade redhat openstack to a higher version than 10,13,14,15,and avoid the version 10,13,14,15; Upgrade redhat virtualization to a higher version than 4.0,and avoid the version 4.0