RSA decryption vulnerable to Bleichenbacher timing vulnerability
RSA decryption was vulnerable to Bleichenbacher timing vulnerabilities, which would impact people using RSA decryption in online scenarios. This is fixed in cryptography 3.2.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-25659US | medium5.9 | — | ||
python-cryptography 3.2 is vulnerable to Bleichenbacher timing attacks in the RSA decryption API, via timed processing of valid PKCS#1 v1.5 ciphertext. | ||||
02
references
External citations — patches, advisories, analysis.
- https://github.com/advisories/GHSA-hggm-jpg3-v476ADVISORY
- https://github.com/pyca/cryptographyPACKAGE
- https://github.com/pyca/cryptography/commit/58494b41d6ecb0f56b7c5f05d5f5e3ca0320d494WEB
- https://github.com/pyca/cryptography/pull/5507WEB
- https://github.com/pyca/cryptography/security/advisories/GHSA-hggm-jpg3-v476WEB
- https://github.com/pypa/advisory-database/tree/main/vulns/cryptography/PYSEC-2021-62.yamlWEB
- https://nvd.nist.gov/vuln/detail/CVE-2020-25659ADVISORY
- https://pypi.org/project/cryptographyWEB
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan