Lucene search
GoogleOSV:GHSA-HGGM-JPG3-V476HistoryOct 27, 2020 - 8:33 p.m.
RSA decryption vulnerable to Bleichenbacher timing vulnerability
2020-10-2720:33:13
Google
osv.dev
30
rsa decryption
bleichenbacher
timing vulnerability
cryptography
software
EPSS
0.001
Percentile
44.7%
RSA decryption was vulnerable to Bleichenbacher timing vulnerabilities, which would impact people using RSA decryption in online scenarios. This is fixed in cryptography 3.2.
References
github.com/pyca/cryptography
github.com/pyca/cryptography/commit/58494b41d6ecb0f56b7c5f05d5f5e3ca0320d494
github.com/pyca/cryptography/pull/5507/commits/ce1bef6f1ee06ac497ca0c837fbd1c7ef6c2472b
github.com/pyca/cryptography/security/advisories/GHSA-hggm-jpg3-v476
nvd.nist.gov/vuln/detail/CVE-2020-25659
pypi.org/project/cryptography
www.oracle.com/security-alerts/cpuapr2022.html
www.oracle.com/security-alerts/cpujul2022.html
Related
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2020:3592-1)
2021-06-09 00:00:00
nessus
nessus
EulerOS Virtualization 2.10.1 : python-cryptography (EulerOS-SA-2024-2008)
2024-07-18 00:00:00
Juniper Junos OS Vulnerability (JSA11245)
2021-10-13 00:00:00
openSUSE Security Update : python-cryptography (openSUSE-2020-2173)
2020-12-07 00:00:00
cbl_mariner
cbl_mariner
CVE-2020-25659 affecting package python-cryptography 2.3.1-4
2021-01-29 07:39:12
github
github
RSA decryption vulnerable to Bleichenbacher timing vulnerability
2020-10-27 20:33:13
suse
suse
Security update for python-cryptography (moderate)
2020-12-06 00:00:00
osv
osv
python-cryptography vulnerability
2020-11-03 12:17:34
CVE-2020-25659
2021-01-11 16:15:15
PYSEC-2021-62
2021-01-11 16:15:00
cvelist
cvelist
CVE-2020-25659
2021-01-11 15:37:29
redhatcve
redhatcve
CVE-2020-25659
2020-10-26 18:33:02
CVE-2023-50782
2023-12-13 22:29:12
cve
cve
CVE-2020-25659
2021-01-11 16:15:15
CVE-2023-50782
2024-02-05 21:15:11
mageia
mageia
Updated python-cryptography packages fix security vulnerability
2020-11-23 22:51:37
ibm
ibm
ubuntu
ubuntu
python-cryptography vulnerability
2020-11-03 00:00:00
ubuntucve
ubuntucve
CVE-2020-25659
2020-10-28 00:00:00
prion
prion
Code injection
2021-01-11 16:15:00
debiancve
debiancve
CVE-2020-25659
2021-01-11 16:15:15
veracode
veracode
Insecure RSA Decryption (Bleichenbacher Timing Vulnerability)
2020-10-28 01:01:52
alpinelinux
alpinelinux
CVE-2020-25659
2021-01-11 16:15:15
nvd
nvd
CVE-2020-25659
2021-01-11 16:15:15
almalinux
almalinux
Moderate: python-cryptography security, bug fix, and enhancement update
2021-05-18 05:38:36
redhat
redhat
rocky
rocky
python-cryptography security, bug fix, and enhancement update
2021-05-18 05:38:36
oraclelinux
oraclelinux
python-cryptography security, bug fix, and enhancement update
2021-05-25 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - April 2022
2022-04-19 00:00:00