python-cryptography 3.2 is vulnerable to Bleichenbacher timing attacks in the RSA decryption API, via timed processing of valid PKCS#1 v1.5 ciphertext.

References

github.com/pyca/cryptography/pull/5507/commits/ce1bef6f1ee06ac497ca0c837fbd1c7ef6c2472b

www.oracle.com/security-alerts/cpuapr2022.html

www.oracle.com/security-alerts/cpujul2022.html

openvas 14

osv 6

nessus 25

cbl_mariner 1

github 1

mageia 1

ibm 9

ubuntucve 1

ubuntu 1

suse 1

cvelist 2

cve 2

redhatcve 2

prion 1

alpinelinux 1

veracode 1

debiancve 1

nvd 1

almalinux 1

rocky 1

oraclelinux 1

redhat 7

oracle 1

openvas

Huawei EulerOS: Security Advisory for python-cryptography (EulerOS-SA-2024-2008)

2024-07-19 00:00:00

SUSE: Security Advisory (SUSE-SU-2020:3592-1)

2021-06-09 00:00:00

Huawei EulerOS: Security Advisory for python-cryptography (EulerOS-SA-2024-2048)

2024-07-22 00:00:00

osv

RSA decryption vulnerable to Bleichenbacher timing vulnerability

2020-10-27 20:33:13

python-cryptography vulnerability

2020-11-03 12:17:34

PYSEC-2021-62

2021-01-11 16:15:00

nessus

EulerOS Virtualization 2.10.1 : python-cryptography (EulerOS-SA-2024-2008)

2024-07-18 00:00:00

EulerOS 2.0 SP8 : python-cryptography (EulerOS-SA-2024-2486)

2024-09-24 00:00:00

Juniper Junos OS Vulnerability (JSA11245)

2021-10-13 00:00:00

cbl_mariner

CVE-2020-25659 affecting package python-cryptography 2.3.1-4

2021-01-29 07:39:12

github

RSA decryption vulnerable to Bleichenbacher timing vulnerability

2020-10-27 20:33:13

mageia

Updated python-cryptography packages fix security vulnerability

2020-11-23 22:51:37

ibm

Security Bulletin: IBM Cloud Private is vulnerable to a Python vulnerability (CVE-2020-25659)

2021-02-26 16:26:30

Security Bulletin: Vulnerability in Python affects IBM Spectrum Protect Plus Microsoft File Systems backup and restore (CVE-2020-25659)

2021-04-24 06:07:53

Security Bulletin: IBM Watson OpenScale on Cloud Pak for Data is impacted by CVE-2020-25659

2021-03-11 11:09:12

ubuntucve

CVE-2020-25659

2020-10-28 00:00:00

ubuntu

python-cryptography vulnerability

2020-11-03 00:00:00

suse

Security update for python-cryptography (moderate)

2020-12-06 00:00:00

cvelist

CVE-2020-25659

2021-01-11 15:37:29

CVE-2023-50782 Python-cryptography: bleichenbacher timing oracle attack against rsa decryption - incomplete fix for cve-2020-25659

2024-02-05 20:45:49

cve

CVE-2020-25659

2021-01-11 16:15:15

CVE-2023-50782

2024-02-05 21:15:11

redhatcve

CVE-2020-25659

2020-10-26 18:33:02

CVE-2023-50782

2023-12-13 22:29:12

prion

Code injection

2021-01-11 16:15:00

alpinelinux

CVE-2020-25659

2021-01-11 16:15:15

veracode

Insecure RSA Decryption (Bleichenbacher Timing Vulnerability)

2020-10-28 01:01:52

debiancve

CVE-2020-25659

2021-01-11 16:15:15

nvd

CVE-2020-25659

2021-01-11 16:15:15

almalinux

Moderate: python-cryptography security, bug fix, and enhancement update

2021-05-18 05:38:36

rocky

python-cryptography security, bug fix, and enhancement update

2021-05-18 05:38:36

oraclelinux

python-cryptography security, bug fix, and enhancement update

2021-05-25 00:00:00

redhat

(RHSA-2021:1608) Moderate: python-cryptography security, bug fix, and enhancement update

2021-05-18 05:38:36

(RHSA-2021:2239) Moderate: Red Hat Virtualization Host security update [ovirt-4.4.6]

2021-06-03 08:43:27

(RHSA-2021:3254) Moderate: rh-python38 security, bug fix, and enhancement update

2021-08-24 07:30:01

oracle

Oracle Critical Patch Update Advisory - April 2022

2022-04-19 00:00:00

Solutions

Vulnerabilities intelligence
Perimeter control tool
Linux scanner
Windows scanner
Developers SDK
Security Intelligence feeds

Database

Vulnerabilities
Exploits
Security News
BugBounty
Wild Exploited
Top Vulnerabilities
CVE Feed

Resources

Statics & Sources
Plugins
API docs
FAQ
Blog
Glossary

Company

About
Contacts
Pricing
EULA
Privacy Policy
Submission Policy
OpenSource

@2024 Vulners Inc

EPSS

0.001

Percentile

44.7%

JSON

Related for OSV:CVE-2020-25659