Timing attacks in python-rsa
It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decrypt parts of the cipher text encrypted with RSA
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-25658US | medium5.9OT elevated | — | ||
It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decrypt parts of the cipher text encrypted… | ||||
02
references
External citations — patches, advisories, analysis.
- https://access.redhat.com/errata/RHSA-2020:5634WEB
- https://access.redhat.com/errata/RHSA-2021:0637WEB
- https://access.redhat.com/errata/RHSA-2022:1716WEB
- https://access.redhat.com/security/cve/CVE-2020-25658WEB
- https://bugzilla.redhat.com/show_bug.cgi?id=1889972WEB
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-25658WEB
- https://github.com/advisories/GHSA-xrx6-fmxq-rjj2ADVISORY
- https://github.com/pypa/advisory-database/tree/main/vulns/rsa/PYSEC-2020-100.yamlWEB
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan