CVE-2023-52323

Summary of CVE-2023-52323 (CVE entry with concrete details): The IBM bulletin notes that PyCryptodome and pycryptodomex prior to 3.19.1 allow side-channel leakage during OAEP decryption, enabling a Manager attack scenario. In the connected IBM Storage Defender Sentinel Anomaly Scan Engine advisor...

PT-2024-1077

Name of the Vulnerable Software and Affected Versions PyCryptodome and pycryptodomex versions prior to 3.19.1 Description The issue is related to side-channel leakage for OAEP decryption, which can be exploited for a Manger attack. This allows a remote attacker to gain unauthorized access to...

CVE-2023-5388

It was discovered that the numerical library used in NSS for RSA cryptography leaks information whether high order bits of the RSA decryption result are zero. This information can be used to mount a Bleichenbacher or Manger like attack against all RSA decryption operations. As the leak happens...

Mozilla NSS Security Vulnerability

NSS is an underlying cryptography library from the Mozilla Foundation. The library supports a variety of cryptographic algorithms, and the Firefox browser's TLS implementation is based on this library. A security vulnerability exists in Mozilla NSS, which arises when the numeric library for RSA...