RSA decryption vulnerable to Bleichenbacher timing vulnerability

🗓️ 27 Oct 2020 20:33:13Reported by GitHub Advisory DatabaseType

github

github🔗 github.com👁 69 Views

RSA decryption vulnerable to Bleichenbacher timing vulnerability, fixed in cryptography 3.

Reporter	Title	Published	Views	Family All 134
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Cloud Pak for Multicloud Management	28 Feb 202421:30	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in the Python, Python cryptography , and Urllib3 affect IBM Spectrum Discover.	30 Jul 202105:01	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Private is vulnerable to a Python vulnerability (CVE-2020-25659)	26 Feb 202116:26	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Python affects IBM Spectrum Protect Plus Microsoft File Systems backup and restore (CVE-2020-25659)	24 Apr 202106:07	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson OpenScale on Cloud Pak for Data is impacted by CVE-2020-25659	11 Mar 202111:09	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM contains multiple vulnerabilities	15 Apr 202502:20	–	ibm
IBM Security Bulletins	Security Bulletin: Cloud Pak for Security contains packages that have multiple vulnerabilities	1 Apr 202216:38	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Network Automation 2.7.3 addresses multiple security vulnerabilities	26 Mar 202504:10	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in the Python, Docker, and ICP affect IBM Spectrum Discover	13 May 202116:56	–	ibm
Tenable Nessus	Amazon Linux 2 : python-cryptography (ALAS-2025-2930)	10 Jul 202500:00	–	nessus

Vulners

Node

cryptography py3.10_cryptographyRange<3.2pip

Source	Link
github	www.github.com/pyca/cryptography/security/advisories/GHSA-hggm-jpg3-v476
github	www.github.com/pyca/cryptography/commit/58494b41d6ecb0f56b7c5f05d5f5e3ca0320d494
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-25659
oracle	www.oracle.com/security-alerts/cpuapr2022.html
oracle	www.oracle.com/security-alerts/cpujul2022.html
github	www.github.com/pyca/cryptography/pull/5507
github	www.github.com/advisories/GHSA-hggm-jpg3-v476
github	www.github.com/pypa/advisory-database/tree/main/vulns/cryptography/PYSEC-2021-62.yaml
pypi	www.pypi.org/project/cryptography

18 Nov 2024 16:26Current

3.3Low risk

Vulners AI Score3.3

CVSS 24.3

CVSS 3.15.9

EPSS0.0076

rsa decryption bleichenbacher timing vulnerability cryptography 3.2 online scenarios software