Lucene search
+L

149 matches found

Fedora
Fedora
•added 2020/07/13 1:39 a.m.•36 views

[SECURITY] Fedora 31 Update: python-rsa-3.4.2-15.fc31

Python-RSA is a pure-Python RSA implementation. It supports encryption and decryption, signing and verifying signatures, and key generation according to PKCS1 version 1.5. It can be used as a Python library as well as on the command-line...

7.5CVSS3.2AI score0.01397EPSS
SaveExploits1
RedhatCVE
RedhatCVE
•added 2020/06/18 1:25 p.m.•31 views

CVE-2020-13757

A flaw was found in the python-rsa package, where it does not explicitly check the ciphertext length against the key size and ignores the leading 0 bytes during the decryption of the ciphertext. This flaw allows an attacker to perform a ciphertext attack, leading to a denial of service. The highe...

5CVSS2.3AI score0.01397EPSS
SaveExploits1References4
CNVD
CNVD
•added 2020/06/02 12:00 a.m.•14 views

Python-RSA Cryptography Problem Vulnerability

Python-RSA is a Python library that supports encryption and decryption, signing, verification of signatures, and key generation from the Dutch software developer SYBREN A.STVEL. A cryptographic issue vulnerability exists in Python-RSA versions prior to 4.1, which can be exploited by an attacker t...

7.5CVSS7.8AI score0.01397EPSS
SaveExploits1References1
NVD
NVD
•added 2020/06/01 7:15 p.m.•23 views

CVE-2020-13757

Python-RSA before 4.1 ignores leading '\0' bytes during decryption of ciphertext. This could conceivably have a security-relevant impact, e.g., by helping an attacker to infer that an application uses Python-RSA, or if the length of accepted ciphertext affects application behavior such as by...

7.5CVSS7.4AI score0.01397EPSS
SaveExploits1References5
OSV
OSV
•added 2020/06/01 7:15 p.m.•43 views

CVE-2020-13757

Python-RSA before 4.1 ignores leading '\0' bytes during decryption of ciphertext. This could conceivably have a security-relevant impact, e.g., by helping an attacker to infer that an application uses Python-RSA, or if the length of accepted ciphertext affects application behavior such as by...

7.5CVSS7AI score
SaveExploits0References5
OSV
OSV
•added 2020/06/01 7:15 p.m.•3 views

DEBIAN-CVE-2020-13757

Python-RSA before 4.1 ignores leading '\0' bytes during decryption of ciphertext. This could conceivably have a security-relevant impact, e.g., by helping an attacker to infer that an application uses Python-RSA, or if the length of accepted ciphertext affects application behavior such as by...

7.5CVSS7.3AI score0.01397EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
•added 2020/06/01 7:15 p.m.•52 views

CVE-2020-13757

Python-RSA before 4.1 ignores leading '\0' bytes during decryption of ciphertext. This could conceivably have a security-relevant impact, e.g., by helping an attacker to infer that an application uses Python-RSA, or if the length of accepted ciphertext affects application behavior such as by...

7.5CVSS7.1AI score0.01397EPSS
SaveExploits1References4
Prion
Prion
•added 2020/06/01 7:15 p.m.•29 views

Memory corruption

Python-RSA before 4.1 ignores leading '\0' bytes during decryption of ciphertext. This could conceivably have a security-relevant impact, e.g., by helping an attacker to infer that an application uses Python-RSA, or if the length of accepted ciphertext affects application behavior such as by...

5CVSS7.3AI score0.01397EPSS
SaveExploits1References5Affected Software3
OSV
OSV
•added 2020/06/01 7:15 p.m.•37 views

PYSEC-2020-99

Python-RSA before 4.1 ignores leading '\0' bytes during decryption of ciphertext. This could conceivably have a security-relevant impact, e.g., by helping an attacker to infer that an application uses Python-RSA, or if the length of accepted ciphertext affects application behavior such as by...

7.5CVSS2.3AI score0.01397EPSS
SaveExploits1References6
OSV
OSV
•added 2020/06/01 7:15 p.m.•12 views

UBUNTU-CVE-2020-13757

Python-RSA before 4.1 ignores leading '\0' bytes during decryption of ciphertext. This could conceivably have a security-relevant impact, e.g., by helping an attacker to infer that an application uses Python-RSA, or if the length of accepted ciphertext affects application behavior such as by...

7.5CVSS7.2AI score0.01397EPSS
SaveExploits1References5
Debian CVE
Debian CVE
•added 2020/06/01 6:17 p.m.•41 views

CVE-2020-13757

Python-RSA before 4.1 ignores leading '\0' bytes during decryption of ciphertext. This could conceivably have a security-relevant impact, e.g., by helping an attacker to infer that an application uses Python-RSA, or if the length of accepted ciphertext affects application behavior such as by...

7.5CVSS7.5AI score0.01397EPSS
SaveExploits1
Cvelist
Cvelist
•added 2020/06/01 6:17 p.m.•40 views

CVE-2020-13757

Python-RSA before 4.1 ignores leading '\0' bytes during decryption of ciphertext. This could conceivably have a security-relevant impact, e.g., by helping an attacker to infer that an application uses Python-RSA, or if the length of accepted ciphertext affects application behavior such as by...

7.4AI score0.01397EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/06/01 12:00 a.m.•4 views

CVE-2020-13757: Use of a Broken or Risky Cryptographic Algorithm

Python-RSA before 4.1 ignores leading '\0' bytes during decryption of ciphertext. This could conceivably have a security-relevant impact, e.g., by helping an attacker to infer that an application uses Python-RSA, or if the length of accepted ciphertext affects application behavior such as by...

7.5CVSS5.8AI score0.01397EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2020/05/27 12:00 a.m.•16 views

PT-2020-13658 · Python +5 · Python-Rsa +5

Name of the Vulnerable Software and Affected Versions: Python-RSA versions prior to 4.1 Description: The issue concerns the decryption of ciphertext, where leading '0' bytes are ignored. This could potentially have security implications, such as helping an attacker infer that an application uses...

7.8CVSS5.2AI score0.01651EPSS
SaveExploits2References55
IBM Security Bulletins
IBM Security Bulletins
•added 2018/06/18 1:33 a.m.•30 views

Security Bulletin: A vulnerability in Python-RSA affects PowerKVM (CVE-2016-1494)

Summary PowerKVM is affected by a vulnerability in the Python RSA library Python-RSA. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2016-1494 DESCRIPTION: Python Python-RSA could allow a remote attacker to conduct spoofing attacks, an error in the verify function. By...

5.3CVSS1.5AI score0.07054EPSS
SaveExploits1Affected Software1
myhack58
myhack58
•added 2016/04/12 12:00 a.m.•39 views

CVE-2 0 1 6-1 4 9 4 (python – rsa)vulnerability details-vulnerability warning-the black bar safety net

0×0 1 Overview CVE-2 0 1 6-1 4 9 4 vulnerability is about the Python-rsa signature forgery. In certain cases, can be forged a python rsa library to generate the signature information. But the premise needs an RSA public key exponent value e is small, the following are to e=3 discussion. A digital...

0.2AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2016/04/11 12:00 a.m.•12 views

Fedora Update for python-rsa FEDORA-2016-6

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2016/04/08 12:00 a.m.•15 views

Fedora 22 : python-rsa-3.4.1-1.fc22 (2016-15fb7deba0)

New upstream release with security bug fix Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEV...

5.4AI score
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2016/04/07 12:00 a.m.•9 views

Fedora 23 : python-rsa-3.4.1-1.fc23 (2016-df2529c86c)

New upstream release with security bug fix Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEV...

5.4AI score
SaveExploits0References2
Fedora
Fedora
•added 2016/04/06 5:23 p.m.•15 views

[SECURITY] Fedora 23 Update: python-rsa-3.4.1-1.fc23

Python-RSA is a pure-Python RSA implementation. It supports encryption and decryption, signing and verifying signatures, and key generation according to PKCS1 version 1.5. It can be used as a Python library as well as on the command-line...

3.2AI score
SaveExploits0
Rows per page
Query Builder