Lucene search
PRIOn knowledge basePRION:CVE-2016-1494HistoryJan 13, 2016 - 3:59 p.m.
Design/Logic Flaw
2016-01-1315:59:00
PRIOn knowledge base
www.prio-n.com
3
The verify function in the RSA package for Python (Python-RSA) before 3.3 allows attackers to spoof signatures with a small public exponent via crafted signature padding, aka a BERserk attack.
References
lists.opensuse.org/opensuse-updates/2016-01/msg00032.html
www.openwall.com/lists/oss-security/2016/01/05/1
www.openwall.com/lists/oss-security/2016/01/05/3
www.securityfocus.com/bid/79829
bitbucket.org/sybren/python-rsa/pull-requests/14/security-fix-bb06-attack-in-verify-by/diff
blog.filippo.io/bleichenbacher-06-signature-forgery-in-python-rsa/
lists.fedoraproject.org/pipermail/package-announce/2016-January/175897.html
lists.fedoraproject.org/pipermail/package-announce/2016-January/175942.html
Related
nessus
nessus
FreeBSD : py-rsa -- Bleichenbacher'06 signature forgery vulnerability (e78bfc9d-cb1e-11e5-b251-0050562a4d7b)
2016-02-05 00:00:00
Fedora 22 : python-rsa-3.3-2.fc22 (2016-c845706426)
2016-03-04 00:00:00
Amazon Linux AMI : python-rsa (ALAS-2016-644)
2016-02-10 00:00:00
openvas
openvas
Fedora Update for python-rsa FEDORA-2016-70
2016-01-22 00:00:00
Mageia: Security Advisory (MGASA-2016-0011)
2016-01-14 00:00:00
Amazon Linux: Security Advisory (ALAS-2016-644)
2016-02-11 00:00:00
nvd
nvd
CVE-2016-1494
2016-01-13 15:59:02
cve
cve
CVE-2016-1494
2016-01-13 15:59:02
archlinux
archlinux
python2-rsa: signature forgery
2016-01-25 00:00:00
python-rsa: signature forgery
2016-01-25 00:00:00
ubuntucve
ubuntucve
CVE-2016-1494
2016-01-13 00:00:00
debiancve
debiancve
CVE-2016-1494
2016-01-13 15:59:02
mageia
mageia
Updated python-rsa packages fix security vulnerability
2016-01-12 12:13:53
osv
osv
Python RSA allows attackers to spoof signatures
2022-05-14 00:59:49
PYSEC-2016-10
2016-01-13 15:59:00
amazon
amazon
Medium: python-rsa
2016-02-09 13:30:00
fedora
fedora
[SECURITY] Fedora 23 Update: python-rsa-3.3-2.fc23
2016-01-22 02:25:01
[SECURITY] Fedora 22 Update: python-rsa-3.3-2.fc22
2016-01-24 03:18:52
github
github
Python RSA allows attackers to spoof signatures
2022-05-14 00:59:49
freebsd
freebsd
py-rsa -- Bleichenbacher'06 signature forgery vulnerability
2016-01-05 00:00:00
ibm
ibm
cvelist
cvelist
CVE-2016-1494
2016-01-13 15:00:00
f5
f5
rosalinux
rosalinux
Advisory ROSA-SA-2021-1957
2021-07-02 18:03:40