Lucene search
+L

700 matches found

OSV
OSV
•added 2020/12/21 4:56 p.m.•126 views

GHSA-WVCV-832Q-FJG7 RSA weakness in tslite-ng

Impact The code that performs decryption and padding check in RSA PKCS1 v1.5 decryption is data dependant. In particular, code in current as of 0.8.0-alpha38 master https://github.com/tlsfuzzer/tlslite-ng/blob/0812ed60860fa61a6573b2c0e18771414958f46d/tlslite/utils/rsakey.pyL407-L441 and code in...

8.7CVSS7.4AI score0.01523EPSS
SaveExploits1References9
Tenable Nessus
Tenable Nessus
•added 2020/12/09 12:00 a.m.•26 views

SUSE SLED15 / SLES15 Security Update : python-cryptography (SUSE-SU-2020:3592-1)

This update for python-cryptography fixes the following issues : CVE-2020-25659: Attempted to mitigate Bleichenbacher attacks on RSA decryption bsc1178168. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has...

5.9CVSS7AI score0.02433EPSS
SaveExploits0References4
OSV
OSV
•added 2020/12/02 9:31 a.m.•10 views

SUSE-SU-2020:3592-1 Security update for python-cryptography

This update for python-cryptography fixes the following issues: - CVE-2020-25659: Attempted to mitigate Bleichenbacher attacks on RSA decryption bsc1178168...

5.9CVSS7.3AI score0.02433EPSS
SaveExploits0References3
NVD
NVD
•added 2020/11/12 2:15 p.m.•29 views

CVE-2020-25658

It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decrypt parts of the cipher text encrypted with RSA...

7.5CVSS7.4AI score0.01651EPSS
SaveExploits1References5
OSV
OSV
•added 2020/11/12 2:15 p.m.•38 views

CVE-2020-25658

It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decrypt parts of the cipher text encrypted with RSA...

5.9CVSS5.6AI score
SaveExploits0References5
OSV
OSV
•added 2020/11/12 2:15 p.m.•12 views

UBUNTU-CVE-2020-25658

It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decrypt parts of the cipher text encrypted with RSA...

7.5CVSS6.7AI score0.01651EPSS
SaveExploits1References4
OSV
OSV
•added 2020/11/12 2:15 p.m.•73 views

PYSEC-2020-100

It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decrypt parts of the cipher text encrypted with RSA...

7.5CVSS4.5AI score0.01651EPSS
SaveExploits1References3
Prion
Prion
•added 2020/11/12 2:15 p.m.•29 views

Code injection

It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decrypt parts of the cipher text encrypted with RSA...

4.3CVSS5.7AI score0.01651EPSS
SaveExploits1References5Affected Software3
Cvelist
Cvelist
•added 2020/11/12 1:48 p.m.•39 views

CVE-2020-25658

It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decrypt parts of the cipher text encrypted with RSA...

7.5CVSS6.8AI score0.01651EPSS
SaveExploits1References5
Debian CVE
Debian CVE
•added 2020/11/12 1:48 p.m.•41 views

CVE-2020-25658

It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decrypt parts of the cipher text encrypted with RSA...

7.5CVSS5.6AI score0.01651EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/11/12 12:00 a.m.•2 views

CVE-2020-25658: Covert Timing Channel

It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decrypt parts of the cipher text encrypted with RSA...

7.5CVSS5.8AI score0.01651EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2020/11/09 4:28 a.m.•43 views

CVE-2020-25658

A flaw was found in python-rsa, where it is vulnerable to Bleichenbacher timing attacks. This flaw allows an attacker, via the RSA decryption API, to decrypt parts of the ciphertext encrypted with RSA. The highest threat from this vulnerability is to confidentiality...

7.5CVSS4.5AI score0.01651EPSS
SaveExploits1References4
OpenVAS
OpenVAS
•added 2020/11/04 12:00 a.m.•19 views

Huawei EulerOS: Security Advisory for nettle (EulerOS-SA-2020-2371)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.7CVSS6AI score0.01495EPSS
SaveExploits0References2
OSV
OSV
•added 2020/10/28 12:00 a.m.•11 views

UBUNTU-CVE-2020-25659

python-cryptography 3.2 is vulnerable to Bleichenbacher timing attacks in the RSA decryption API, via timed processing of valid PKCS1 v1.5 ciphertext...

5.9CVSS6.8AI score0.02433EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2020/10/28 12:00 a.m.•51 views

CVE-2020-25659

python-cryptography 3.2 is vulnerable to Bleichenbacher timing attacks in the RSA decryption API, via timed processing of valid PKCS1 v1.5 ciphertext...

5.9CVSS6.9AI score0.02433EPSS
SaveExploits0References3
OSV
OSV
•added 2020/10/27 8:33 p.m.•68 views

GHSA-HGGM-JPG3-V476 RSA decryption vulnerable to Bleichenbacher timing vulnerability

RSA decryption was vulnerable to Bleichenbacher timing vulnerabilities, which would impact people using RSA decryption in online scenarios. This is fixed in cryptography 3.2...

8.2CVSS5.9AI score0.02433EPSS
SaveExploits0References10
Github Security Blog
Github Security Blog
•added 2020/10/27 8:33 p.m.•77 views

RSA decryption vulnerable to Bleichenbacher timing vulnerability

RSA decryption was vulnerable to Bleichenbacher timing vulnerabilities, which would impact people using RSA decryption in online scenarios. This is fixed in cryptography 3.2...

5.9CVSS3.3AI score0.02433EPSS
SaveExploits0References9Affected Software1
RedhatCVE
RedhatCVE
•added 2020/10/26 6:33 p.m.•45 views

CVE-2020-25659

A flaw was found in python-cryptography, where it is vulnerable to Bleichenbacher timing attacks. This flaw allows an attacker, via the RSA decryption API, to decrypt parts of the ciphertext encrypted with RSA. The highest threat from this vulnerability is to confidentiality...

5.9CVSS4.5AI score0.02433EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2020/10/25 12:00 a.m.•11 views

PT-2020-6703 · Pypi +8 · Python-Cryptography +8

Name of the Vulnerable Software and Affected Versions: python-cryptography versions 3.2 Description: The issue is related to errors in RSA key management in the python-cryptography package for the Python programming language. It may allow a remote attacker to gain unauthorized access to protected...

9.1CVSS6.1AI score0.06718EPSS
SaveExploits6References117
Tenable Nessus
Tenable Nessus
•added 2020/10/21 12:00 a.m.•39 views

EulerOS Virtualization 3.0.2.2 : nettle (EulerOS-SA-2020-2206)

According to the version of the nettle package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - A Bleichenbacher type side-channel based padding oracle attack was found in the way nettle handles endian conversion of RSA decrypted...

5.7CVSS5.5AI score0.01495EPSS
SaveExploits0References2
Rows per page
Query Builder