Executive brief
Minerva timing attack on P-256 in python-ecdsa
Affected products
- PyPI ecdsa
Junglewise Threat Intelligence
CVE-2024-23342: PYSEC-2026-1325 - Minerva timing attack on P-256 in python-ecdsa
CVE-2024-23342 · Severity: low · CVSS 3.1 · Published 2026-07-07
Technologies: ecdsa (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2026-2467 - python-ecdsa: Denial of Service via improper DER length validation in crafted private keys
- PYSEC-2020-163 - A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding. Without
- PYSEC-2020-182 - A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding. Without
- PYSEC-2019-177 - An error-handling flaw was found in python-ecdsa before version 0.13.3. During signature decoding, malformed DER signatures could raise unex