Lucene search
GoogleOSV:PYSEC-2016-10HistoryJan 13, 2016 - 3:59 p.m.
PYSEC-2016-10
2016-01-1315:59:00
Google
osv.dev
8
EPSS
0.004
Percentile
74.7%
The verify function in the RSA package for Python (Python-RSA) before 3.3 allows attackers to spoof signatures with a small public exponent via crafted signature padding, aka a BERserk attack.
References
lists.fedoraproject.org/pipermail/package-announce/2016-January/175897.html
lists.fedoraproject.org/pipermail/package-announce/2016-January/175942.html
lists.opensuse.org/opensuse-updates/2016-01/msg00032.html
www.openwall.com/lists/oss-security/2016/01/05/1
www.openwall.com/lists/oss-security/2016/01/05/3
www.securityfocus.com/bid/79829
bitbucket.org/sybren/python-rsa/pull-requests/14/security-fix-bb06-attack-in-verify-by/diff
blog.filippo.io/bleichenbacher-06-signature-forgery-in-python-rsa/
Related
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2016:0107-1)
2021-06-09 00:00:00
Mageia: Security Advisory (MGASA-2016-0011)
2016-01-14 00:00:00
Amazon Linux: Security Advisory (ALAS-2016-644)
2016-02-11 00:00:00
github
github
Python RSA allows attackers to spoof signatures
2022-05-14 00:59:49
nessus
nessus
FreeBSD : py-rsa -- Bleichenbacher'06 signature forgery vulnerability (e78bfc9d-cb1e-11e5-b251-0050562a4d7b)
2016-02-05 00:00:00
Amazon Linux AMI : python-rsa (ALAS-2016-644)
2016-02-10 00:00:00
Fedora 22 : python-rsa-3.3-2.fc22 (2016-c845706426)
2016-03-04 00:00:00
cve
cve
CVE-2016-1494
2016-01-13 15:59:02
nvd
nvd
CVE-2016-1494
2016-01-13 15:59:02
prion
prion
Design/Logic Flaw
2016-01-13 15:59:00
amazon
amazon
Medium: python-rsa
2016-02-09 13:30:00
fedora
fedora
[SECURITY] Fedora 23 Update: python-rsa-3.3-2.fc23
2016-01-22 02:25:01
[SECURITY] Fedora 22 Update: python-rsa-3.3-2.fc22
2016-01-24 03:18:52
archlinux
archlinux
python-rsa: signature forgery
2016-01-25 00:00:00
python2-rsa: signature forgery
2016-01-25 00:00:00
mageia
mageia
Updated python-rsa packages fix security vulnerability
2016-01-12 12:13:53
ubuntucve
ubuntucve
CVE-2016-1494
2016-01-13 00:00:00
debiancve
debiancve
CVE-2016-1494
2016-01-13 15:59:02
osv
osv
Python RSA allows attackers to spoof signatures
2022-05-14 00:59:49
ibm
ibm
cvelist
cvelist
CVE-2016-1494
2016-01-13 15:00:00
freebsd
freebsd
py-rsa -- Bleichenbacher'06 signature forgery vulnerability
2016-01-05 00:00:00
f5
f5
rosalinux
rosalinux
Advisory ROSA-SA-2021-1957
2021-07-02 18:03:40