PYSEC-2020-100

vendorUSosv
view advisory published 2020-11-12Licence: CC-BY-4.0

It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decrypt parts of the cipher text encrypted with RSA.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2020-25658USmedium5.9OT elevated—
It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decrypt parts of the cipher text encrypted…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan