CVE-2020-13757

CVE-2020-13757 affects the Python-RSA package. Affected: Python-RSA before 4.1. Root cause: decryption ignores leading '\0' bytes in ciphertext. Impact stated in sources: potential DoS risk and information leakage indicators (e.g., attacker could infer usage, or ciphertext length could affect beh...

CVE-2020-25658

CVE-2020-25658 involves the Python-RSA library and a Bleichenbacher timing attack on the RSA decryption API. An attacker could decrypt parts of ciphertext encrypted with RSA, impacting confidentiality. Connected advisories confirm the vulnerability and provide remediation guidance. IBM/Red Hat an...