Lucene search
PRIOn knowledge basePRION:CVE-2020-25658HistoryNov 12, 2020 - 2:15 p.m.
Code injection
2020-11-1214:15:00
PRIOn knowledge base
www.prio-n.com
11
It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decrypt parts of the cipher text encrypted with RSA.
| CPE | Name | Operator | Version |
|---|---|---|---|
| fedora | eq | 33 | |
| fedora | eq | 34 | |
| fedora | eq | 35 | |
| python-rsa | ge | 2.1 | |
| python-rsa | lt | 4.7 | |
| openstack_platform | eq | 16.0 | |
| openstack_platform | eq | 13.0 |
References
bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-25658
github.com/sybrenstuvel/python-rsa/issues/165
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2SAF67KDGSOHLVFTRDOHNEAFDRSSYIWA/
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/APF364QJ2IYLPDNVFBOEJ24QP2WLVLJP/
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QY4PJWTYSOV7ZEYZVMYIF6XRU73CY6O7/
Related
fedora
fedora
[SECURITY] Fedora 34 Update: python-rsa-4.7.2-1.fc34
2021-09-24 20:32:52
[SECURITY] Fedora 35 Update: python-rsa-4.7.2-1.fc35
2021-09-24 20:55:15
[SECURITY] Fedora 33 Update: python-rsa-4.7.2-1.fc33
2021-09-24 20:38:04
nvd
nvd
CVE-2020-25658
2020-11-12 14:15:22
mageia
mageia
Updated python-rsa packages fix security vulnerability
2021-10-02 21:57:04
veracode
veracode
Insecure RSA Decryption (Bleichenbacher Timing Attack)
2020-11-10 06:54:44
osv
osv
CVE-2020-25658
2020-11-12 14:15:22
PYSEC-2020-100
2020-11-12 14:15:00
Timing attacks in python-rsa
2021-04-30 17:35:15
openvas
openvas
Fedora: Security Advisory for python-rsa (FEDORA-2021-c1fef03e71)
2021-10-02 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:3932-1)
2022-11-11 00:00:00
Fedora: Security Advisory for python-rsa (FEDORA-2021-783a157adc)
2021-10-02 00:00:00
redhatcve
redhatcve
CVE-2020-25658
2020-11-09 04:28:53
nessus
nessus
SUSE SLES12 Security Update : python-rsa (SUSE-SU-2023:0648-1)
2023-03-08 00:00:00
Amazon Linux 2 : python-rsa (ALAS-2023-2150)
2023-07-20 00:00:00
SUSE SLED15 / SLES15 Security Update : python-rsa (SUSE-SU-2022:3932-1)
2022-11-13 00:00:00
cve
cve
CVE-2020-25658
2020-11-12 14:15:22
github
github
Timing attacks in python-rsa
2021-04-30 17:35:15
ubuntucve
ubuntucve
CVE-2020-25658
2020-11-12 00:00:00
debiancve
debiancve
CVE-2020-25658
2020-11-12 14:15:22
amazon
amazon
Medium: python-rsa
2023-07-17 17:40:00
cvelist
cvelist
CVE-2020-25658
2020-11-12 13:48:31
redhat
redhat
ibm
ibm