Most recent entries from all

BREW-aws-shell-CVE-2020-25658 — Timing attacks in python-rsa

Affected: Homebrew: aws-shell

It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decrypt parts of the cipher text encrypted with RSA

certfr-2022-avi-767 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan…

certfr-2022-avi-767

EUVD-2026-45760

fkie_cve-2020-25658

It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decrypt parts of the cipher text encrypted with RSA.

GHSA-xrx6-fmxq-rjj2 — Timing attacks in python-rsa

Affected: PyPI: rsa

It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decrypt parts of the cipher text encrypted with RSA

gsd-2020-25658

ICSA-24-102-04 — Siemens RUGGEDCOM APE1808

The zend_string_extend function in Zend/zend_string.h in PHP through 7.1.5 does not prevent changes to string objects that result in a negative length, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact by leveraging a script's use of .= with a long string. PHP 7.x through 7.1.5 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a long string because of an Integer overflow in mysqli_real_escape_string. It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decrypt parts of the cipher text encrypted with RSA. In PHP versions 7.4.x below 7.4.28, 8.0.x below 8.0.16, and 8.1.x below 8.1.3, when using filter functions with FILTER_VALIDATE_FLOAT filter and min/max limits, if the filter fails, there is a possibility to trigger use of allocated memory after free, which can result it crashes, and potentially in overwrite of other memory chunks and RCE. This issue affects: code that uses FILTER_VALIDATE_FLOAT with min/max limits. NSS (Network Security Services) versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap overflow when handling DER-encoded DSA or RSA-PSS signatures. Applications using NSS for handling signatures encoded within CMS, S/MIME, PKCS #7, or PKCS #12 are likely to be impacted. Applications using NSS for certificate validat…

openSUSE-SU-2024:11269-1 — python36-rsa-4.7.2-1.5 on GA media

python36-rsa-4.7.2-1.5 on GA media

PYSEC-2020-100

Affected: PyPI: rsa

It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decrypt parts of the cipher text encrypted with RSA.

RHSA-2020:5634 — Red Hat Security Advisory: OpenShift Container Platform 4.7.0 packages security update

atomic-openshift: cross-namespace owner references can trigger deletions of valid children kubernetes: Ceph RBD adminSecrets exposed in logs when loglevel >= 4 containerd: credentials leak during image pull python-rsa: bleichenbacher timing oracle attack against RSA decryption golang: math/big: panic during recursive division of very large numbers gogo/protobuf: plugin/unmarshal/unmarshal.go lacks certain index validation

SUSE-SU-2023:0648-1 — Security update for python-rsa

Security update for python-rsa

UBUNTU-CVE-2020-25658

Affected: Ubuntu:Pro:14.04:LTS: python-rsa, Ubuntu:Pro:16.04:LTS: python-rsa, Ubuntu:Pro:18.04:LTS: python-rsa, Ubuntu:Pro:20.04:LTS: python-rsa, Ubuntu:22.04:LTS: python-rsa

It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decrypt parts of the cipher text encrypted with RSA.

WID-SEC-W-2022-0456 — tribe29 checkmk: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff

Ein Angreifer kann mehrere Schwachstellen in tribe29 checkmk ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.