Lucene search
GoogleOSV:GHSA-HGGM-JPG3-V476HistoryOct 27, 2020 - 8:33 p.m.
RSA decryption vulnerable to Bleichenbacher timing vulnerability
2020-10-2720:33:13
Google
osv.dev
30
rsa decryption
bleichenbacher
timing vulnerability
cryptography
software
EPSS
0.001
Percentile
44.7%
RSA decryption was vulnerable to Bleichenbacher timing vulnerabilities, which would impact people using RSA decryption in online scenarios. This is fixed in cryptography 3.2.
References
github.com/pyca/cryptography
github.com/pyca/cryptography/commit/58494b41d6ecb0f56b7c5f05d5f5e3ca0320d494
github.com/pyca/cryptography/pull/5507/commits/ce1bef6f1ee06ac497ca0c837fbd1c7ef6c2472b
github.com/pyca/cryptography/security/advisories/GHSA-hggm-jpg3-v476
nvd.nist.gov/vuln/detail/CVE-2020-25659
pypi.org/project/cryptography
www.oracle.com/security-alerts/cpuapr2022.html
www.oracle.com/security-alerts/cpujul2022.html
Related
nessus
nessus
EulerOS 2.0 SP9 : python-cryptography (EulerOS-SA-2024-1494)
2024-04-09 00:00:00
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : python-cryptography vulnerability (USN-4613-1)
2020-11-04 00:00:00
Juniper Junos OS Vulnerability (JSA11245)
2021-10-13 00:00:00
suse
suse
Security update for python-cryptography (moderate)
2020-12-06 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2020:3629-1)
2021-04-19 00:00:00
osv
osv
python-cryptography vulnerability
2020-11-03 12:17:34
CVE-2020-25659
2021-01-11 16:15:15
PYSEC-2021-62
2021-01-11 16:15:00
redhatcve
redhatcve
CVE-2020-25659
2020-10-26 18:33:02
CVE-2023-50782
2023-12-13 22:29:12
cvelist
cvelist
CVE-2020-25659
2021-01-11 15:37:29
cve
cve
CVE-2020-25659
2021-01-11 16:15:15
CVE-2023-50782
2024-02-05 21:15:11
cbl_mariner
cbl_mariner
CVE-2020-25659 affecting package python-cryptography 2.3.1-4
2021-01-29 07:39:12
github
github
RSA decryption vulnerable to Bleichenbacher timing vulnerability
2020-10-27 20:33:13
ibm
ibm
ubuntucve
ubuntucve
CVE-2020-25659
2020-10-28 00:00:00
ubuntu
ubuntu
python-cryptography vulnerability
2020-11-03 00:00:00
prion
prion
Code injection
2021-01-11 16:15:00
alpinelinux
alpinelinux
CVE-2020-25659
2021-01-11 16:15:15
nvd
nvd
CVE-2020-25659
2021-01-11 16:15:15
veracode
veracode
Insecure RSA Decryption (Bleichenbacher Timing Vulnerability)
2020-10-28 01:01:52
debiancve
debiancve
CVE-2020-25659
2021-01-11 16:15:15
mageia
mageia
Updated python-cryptography packages fix security vulnerability
2020-11-23 22:51:37
almalinux
almalinux
Moderate: python-cryptography security, bug fix, and enhancement update
2021-05-18 05:38:36
rocky
rocky
python-cryptography security, bug fix, and enhancement update
2021-05-18 05:38:36
oraclelinux
oraclelinux
python-cryptography security, bug fix, and enhancement update
2021-05-25 00:00:00
redhat
redhat
oracle
oracle
Oracle Critical Patch Update Advisory - April 2022
2022-04-19 00:00:00