Lucene search
GoogleOSV:PYSEC-2020-99HistoryJun 01, 2020 - 7:15 p.m.
PYSEC-2020-99
2020-06-0119:15:00
Google
osv.dev
14
0.002 Low
EPSS
Percentile
64.8%
Python-RSA before 4.1 ignores leading ‘\0’ bytes during decryption of ciphertext. This could conceivably have a security-relevant impact, e.g., by helping an attacker to infer that an application uses Python-RSA, or if the length of accepted ciphertext affects application behavior (such as by causing excessive memory allocation).
References
github.com/advisories/GHSA-537h-rv9q-vvph
github.com/sybrenstuvel/python-rsa/issues/146
github.com/sybrenstuvel/python-rsa/issues/146#issuecomment-641845667
lists.fedoraproject.org/archives/list/[email protected]/message/2KILTHBHNSDUCYV22ODLOKTICJJ7JQIQ/
lists.fedoraproject.org/archives/list/[email protected]/message/ZYB65VNILRBTXL6EITQTH2PZPK7I23MW/
usn.ubuntu.com/4478-1/
Related
nessus
nessus
SUSE SLED15 / SLES15 Security Update : python-rsa (SUSE-SU-2021:2008-1)
2021-06-21 00:00:00
openSUSE 15 Security Update : python-rsa (openSUSE-SU-2021:0901-1)
2021-06-28 00:00:00
EulerOS 2.0 SP3 : python-rsa (EulerOS-SA-2020-2070)
2020-09-28 00:00:00
ubuntucve
ubuntucve
CVE-2020-13757
2020-06-01 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for python-rsa (EulerOS-SA-2020-2050)
2020-09-29 00:00:00
openSUSE: Security Advisory for python-rsa (openSUSE-SU-2021:2008-1)
2021-07-13 00:00:00
Fedora: Security Advisory for python-rsa (FEDORA-2020-253ebe55ff)
2020-07-15 00:00:00
suse
suse
Security update for python-rsa (important)
2021-06-24 00:00:00
Security update for python-rsa (important)
2021-07-11 00:00:00
debiancve
debiancve
CVE-2020-13757
2020-06-01 19:15:10
fedora
fedora
[SECURITY] Fedora 31 Update: python-rsa-3.4.2-15.fc31
2020-07-13 01:39:28
[SECURITY] Fedora 32 Update: python-rsa-3.4.2-15.fc32
2020-07-14 01:14:05
mageia
mageia
Updated python-rsa packages fix security vulnerability
2020-09-06 23:33:09
osv
osv
CVE-2020-13757
2020-06-01 19:15:10
Python-RSA decryption of ciphertext leads to DoS
2021-03-24 18:24:39
python-rsa vulnerability
2022-02-21 17:25:41
amazon
amazon
Medium: python-rsa
2020-08-26 23:09:00
Medium: python-rsa
2020-07-31 19:21:00
nvd
nvd
CVE-2020-13757
2020-06-01 19:15:10
ibm
ibm
prion
prion
Memory corruption
2020-06-01 19:15:00
github
github
Python-RSA decryption of ciphertext leads to DoS
2021-03-24 18:24:39
redhatcve
redhatcve
CVE-2020-13757
2020-06-18 13:25:19
ubuntu
ubuntu
Python-RSA vulnerability
2020-08-31 00:00:00
Python-RSA vulnerability
2022-02-21 00:00:00
cve
cve
CVE-2020-13757
2020-06-01 19:15:10
veracode
veracode
Information Disclosure
2020-06-02 01:46:25
cvelist
cvelist
CVE-2020-13757
2020-06-01 18:17:07
redhat
redhat