PYSEC-2020-100
At a glance
- Published
- Updated
- CVE
- CVE-2020-25658
- Aliases
- GHSA-xrx6-fmxq-rjj2
Description
It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decrypt parts of the cipher text encrypted with RSA.
Affected packages
| Package | Versions |
|---|---|
| PyPI · rsa | introduced 2.1, fixed 4.7 |
References
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-25658 REPORT
- https://github.com/sybrenstuvel/python-rsa/issues/165 REPORT
- https://github.com/advisories/GHSA-xrx6-fmxq-rjj2 ADVISORY
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — PyPA Advisory Database |