Lucene search
Veracode Vulnerability DatabaseVERACODE:27684HistoryOct 28, 2020 - 1:01 a.m.
Insecure RSA Decryption (Bleichenbacher Timing Vulnerability)
2020-10-2801:01:52
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
18
cryptography
rsa
decryption
bleichenbacher
timing
vulnerability
pkcs#1v1.5
software
EPSS
0.001
Percentile
44.7%
cryptography is using insecure RSA Decryption and is vulnerable to Bleichenbacher Timing Vulnerability. When RSA decryption is used in online scenarios, it does not use RSA PKCS#1v1.5 decryption with constant time, allowing an attacker to passively record traffic and later decrypt it.
References
github.com/pyca/cryptography/commit/58494b41d6ecb0f56b7c5f05d5f5e3ca0320d494
github.com/pyca/cryptography/pull/5507/commits/ce1bef6f1ee06ac497ca0c837fbd1c7ef6c2472b
github.com/pyca/cryptography/security/advisories/GHSA-hggm-jpg3-v476
www.oracle.com/security-alerts/cpuapr2022.html
www.oracle.com/security-alerts/cpujul2022.html
Related
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2020:3592-1)
2021-06-09 00:00:00
Ubuntu: Security Advisory (USN-4613-1)
2020-11-04 00:00:00
nessus
nessus
Juniper Junos OS Vulnerability (JSA11245)
2021-10-13 00:00:00
openSUSE Security Update : python-cryptography (openSUSE-2020-2173)
2020-12-07 00:00:00
EulerOS Virtualization 2.10.1 : python-cryptography (EulerOS-SA-2024-2008)
2024-07-18 00:00:00
cbl_mariner
cbl_mariner
CVE-2020-25659 affecting package python-cryptography 2.3.1-4
2021-01-29 07:39:12
osv
osv
RSA decryption vulnerable to Bleichenbacher timing vulnerability
2020-10-27 20:33:13
python-cryptography vulnerability
2020-11-03 12:17:34
CVE-2020-25659
2021-01-11 16:15:15
github
github
RSA decryption vulnerable to Bleichenbacher timing vulnerability
2020-10-27 20:33:13
ibm
ibm
ubuntucve
ubuntucve
CVE-2020-25659
2020-10-28 00:00:00
ubuntu
ubuntu
python-cryptography vulnerability
2020-11-03 00:00:00
prion
prion
Code injection
2021-01-11 16:15:00
alpinelinux
alpinelinux
CVE-2020-25659
2021-01-11 16:15:15
debiancve
debiancve
CVE-2020-25659
2021-01-11 16:15:15
nvd
nvd
CVE-2020-25659
2021-01-11 16:15:15
suse
suse
Security update for python-cryptography (moderate)
2020-12-06 00:00:00
redhatcve
redhatcve
CVE-2020-25659
2020-10-26 18:33:02
CVE-2023-50782
2023-12-13 22:29:12
cve
cve
CVE-2020-25659
2021-01-11 16:15:15
CVE-2023-50782
2024-02-05 21:15:11
cvelist
cvelist
CVE-2020-25659
2021-01-11 15:37:29
mageia
mageia
Updated python-cryptography packages fix security vulnerability
2020-11-23 22:51:37
almalinux
almalinux
Moderate: python-cryptography security, bug fix, and enhancement update
2021-05-18 05:38:36
rocky
rocky
python-cryptography security, bug fix, and enhancement update
2021-05-18 05:38:36
oraclelinux
oraclelinux
python-cryptography security, bug fix, and enhancement update
2021-05-25 00:00:00
redhat
redhat
oracle
oracle
Oracle Critical Patch Update Advisory - April 2022
2022-04-19 00:00:00