Lucene search
+L

707 matches found

Github Security Blog
Github Security Blog
•added 2021/04/30 5:35 p.m.•172 views

Timing attacks in python-rsa

It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decrypt parts of the cipher text encrypted with RSA...

7.5CVSS6AI score0.01651EPSS
SaveExploits1References17Affected Software1
OSV
OSV
•added 2021/04/30 5:35 p.m.•140 views

GHSA-XRX6-FMXQ-RJJ2 Timing attacks in python-rsa

It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decrypt parts of the cipher text encrypted with RSA...

8.2CVSS6.3AI score0.01651EPSS
SaveExploits1References18
IBM Security Bulletins
IBM Security Bulletins
•added 2021/04/24 6:07 a.m.•57 views

Security Bulletin: Vulnerability in Python affects IBM Spectrum Protect Plus Microsoft File Systems backup and restore (CVE-2020-25659)

Summary Vulnerability in python-cryptography may affect IBM Spectrum Protect Plus Microsoft® File Systems backup and restore. Vulnerability Details CVEID: CVE-2020-25659 DESCRIPTION: python-cryptography could allow a remote attacker to obtain sensitive information, caused by a Bleichenbacher timi...

5.9CVSS0.6AI score0.02433EPSS
SaveExploits0Affected Software1
OpenVAS
OpenVAS
•added 2021/04/19 12:00 a.m.•40 views

SUSE: Security Advisory (SUSE-SU-2020:3629-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.9CVSS7.4AI score0.02433EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2021/04/14 4:34 p.m.•12 views

m2crypto: bleichenbacher timing attacks in the RSA decryption API

A flaw was found in all released versions of m2crypto, where they are vulnerable to Bleichenbacher timing attacks in the RSA decryption API via the timed processing of valid PKCS1 v1.5 Ciphertext. The highest threat from this vulnerability is to confidentiality...

5.9CVSS5.7AI score0.01741EPSS
SaveExploits0References4
IBM Security Bulletins
IBM Security Bulletins
•added 2021/03/11 11:09 a.m.•58 views

Security Bulletin: IBM Watson OpenScale on Cloud Pak for Data is impacted by CVE-2020-25659

Summary IBM Watson OpenScale on Cloud Pak for Data has addressed CVE-2020-25659. Vulnerability Details CVEID: CVE-2020-25659 DESCRIPTION: python-cryptography could allow a remote attacker to obtain sensitive information, caused by a Bleichenbacher timing attack. By sending a specially-crafted...

5.9CVSS1.2AI score0.02433EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2021/02/26 4:26 p.m.•44 views

Security Bulletin: IBM Cloud Private is vulnerable to a Python vulnerability (CVE-2020-25659)

Summary IBM Cloud Private is vulnerable to a Python vulnerability Vulnerability Details CVEID: CVE-2020-25659 DESCRIPTION: python-cryptography could allow a remote attacker to obtain sensitive information, caused by a Bleichenbacher timing attack. By sending a specially-crafted request using the...

5.9CVSS0.8AI score0.02433EPSS
SaveExploits0Affected Software1
Microsoft CVE
Microsoft CVE
•added 2021/01/20 8:00 a.m.•9 views

python-cryptography 3.2 is vulnerable to Bleichenbacher timing attacks in the RSA decryption API via timed processing of valid PKCS#1 v1.5 ciphertext.

...

5.9CVSS7AI score0.02433EPSS
SaveExploits0
OSV
OSV
•added 2021/01/12 3:15 p.m.•12 views

AZL-10076 CVE-2020-25657 affecting package m2crypto for versions less than 0.38.0-3

A flaw was found in all released versions of m2crypto, where they are vulnerable to Bleichenbacher timing attacks in the RSA decryption API via the timed processing of valid PKCS1 v1.5 Ciphertext. The highest threat from this vulnerability is to confidentiality...

5.9CVSS6.7AI score0.01741EPSS
SaveExploits0References1
OSV
OSV
•added 2021/01/12 3:15 p.m.•13 views

CVE-2020-25657

A flaw was found in all released versions of m2crypto, where they are vulnerable to Bleichenbacher timing attacks in the RSA decryption API via the timed processing of valid PKCS1 v1.5 Ciphertext. The highest threat from this vulnerability is to confidentiality...

5.9CVSS5.7AI score
SaveExploits0References1
OSV
OSV
•added 2021/01/12 3:15 p.m.•13 views

AZL-34969 CVE-2020-25657 affecting package m2crypto for versions less than 0.38.0-3

A flaw was found in all released versions of m2crypto, where they are vulnerable to Bleichenbacher timing attacks in the RSA decryption API via the timed processing of valid PKCS1 v1.5 Ciphertext. The highest threat from this vulnerability is to confidentiality...

5.9CVSS6.7AI score0.01741EPSS
SaveExploits0References1
OSV
OSV
•added 2021/01/12 3:15 p.m.•19 views

UBUNTU-CVE-2020-25657

A flaw was found in all released versions of m2crypto, where they are vulnerable to Bleichenbacher timing attacks in the RSA decryption API via the timed processing of valid PKCS1 v1.5 Ciphertext. The highest threat from this vulnerability is to confidentiality...

5.9CVSS6.8AI score0.01741EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2021/01/12 3:15 p.m.•28 views

CVE-2020-25657

A flaw was found in all released versions of m2crypto, where they are vulnerable to Bleichenbacher timing attacks in the RSA decryption API via the timed processing of valid PKCS1 v1.5 Ciphertext. The highest threat from this vulnerability is to confidentiality...

5.9CVSS6.8AI score0.01741EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2021/01/12 2:33 p.m.•59 views

CVE-2020-25657

A flaw was found in all released versions of m2crypto, where they are vulnerable to Bleichenbacher timing attacks in the RSA decryption API via the timed processing of valid PKCS1 v1.5 Ciphertext. The highest threat from this vulnerability is to confidentiality...

5.9CVSS6.4AI score0.01741EPSS
SaveExploits0
CVE
CVE
•added 2021/01/12 2:33 p.m.•283 views

CVE-2020-25657

CVE-2020-25657 affects all released versions of the Python m2crypto library. The vulnerability arises from Bleichenbacher timing attacks in the RSA decryption API when processing valid PKCS#1 v1.5 ciphertext, with confidentiality as the highest threat. Connected documents tie the CVE to m2crypto,...

5.9CVSS5.6AI score0.01741EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/01/12 12:00 a.m.•6 views

CVE-2020-25657: Covert Timing Channel

A flaw was found in all released versions of m2crypto, where they are vulnerable to Bleichenbacher timing attacks in the RSA decryption API via the timed processing of valid PKCS1 v1.5 Ciphertext. The highest threat from this vulnerability is to confidentiality...

5.9CVSS5.7AI score0.01741EPSS
SaveExploits0References2
OSV
OSV
•added 2021/01/11 4:15 p.m.•3 views

DEBIAN-CVE-2020-25659

python-cryptography 3.2 is vulnerable to Bleichenbacher timing attacks in the RSA decryption API, via timed processing of valid PKCS1 v1.5 ciphertext...

5.9CVSS6.9AI score0.02433EPSS
SaveExploits0References1
OSV
OSV
•added 2021/01/11 4:15 p.m.•50 views

CVE-2020-25659

python-cryptography 3.2 is vulnerable to Bleichenbacher timing attacks in the RSA decryption API, via timed processing of valid PKCS1 v1.5 ciphertext...

5.9CVSS3.9AI score
SaveExploits0References3
OSV
OSV
•added 2021/01/11 4:15 p.m.•10 views

ALPINE-CVE-2020-25659

python-cryptography 3.2 is vulnerable to Bleichenbacher timing attacks in the RSA decryption API, via timed processing of valid PKCS1 v1.5 ciphertext...

5.9CVSS7AI score0.02433EPSS
SaveExploits0References1
PyPA
PyPA
•added 2021/01/11 4:15 p.m.•12 views

PYSEC-2021-62

python-cryptography 3.2 is vulnerable to Bleichenbacher timing attacks in the RSA decryption API, via timed processing of valid PKCS1 v1.5 ciphertext...

5.9CVSS7.7AI score0.02433EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder