Most recent entries from all

bdu:2022-05647

Withdrawn: BELL-CVE-2020-25659 — CVE-2020-25659 does not affect BellSoft software

Withdrawn by the publisher.

BREW-azure-cli-CVE-2020-25659 — RSA decryption vulnerable to Bleichenbacher timing vulnerability

Affected: Homebrew: azure-cli

RSA decryption was vulnerable to Bleichenbacher timing vulnerabilities, which would impact people using RSA decryption in online scenarios. This is fixed in cryptography 3.2.

certfr-2021-avi-505 — De multiples vulnérabilités ont été découvertes dans IBM Spectrum. Elles permettent à un attaquant de provoquer une exé…

certfr-2021-avi-505

EUVD-2026-45704

fkie_cve-2020-25659

python-cryptography 3.2 is vulnerable to Bleichenbacher timing attacks in the RSA decryption API, via timed processing of valid PKCS#1 v1.5 ciphertext.

GHSA-hggm-jpg3-v476 — RSA decryption vulnerable to Bleichenbacher timing vulnerability

Affected: PyPI: cryptography

RSA decryption was vulnerable to Bleichenbacher timing vulnerabilities, which would impact people using RSA decryption in online scenarios. This is fixed in cryptography 3.2.

gsd-2020-25659

msrc_CVE-2020-25659 — python-cryptography 3.2 is vulnerable to Bleichenbacher timing attacks in the RSA decryption API via timed processing o…

msrc_CVE-2020-25659

openSUSE-SU-2020:2173-1 — Security update for python-cryptography

Security update for python-cryptography

PYSEC-2021-62

Affected: PyPI: cryptography

python-cryptography 3.2 is vulnerable to Bleichenbacher timing attacks in the RSA decryption API, via timed processing of valid PKCS#1 v1.5 ciphertext.

RHSA-2021:2239 — Red Hat Security Advisory: Red Hat Virtualization Host security update [ovirt-4.4.6]

python-cryptography: Bleichenbacher timing oracle attack against RSA decryption krb5: unbounded recursion via an ASN.1-encoded Kerberos message in lib/krb5/asn.1/asn1_encode.c may lead to DoS python-cryptography: Large inputs for symmetric encryption can trigger integer overflow leading to buffer overflow

SUSE-SU-2020:3592-1 — Security update for python-cryptography

Security update for python-cryptography

UBUNTU-CVE-2020-25659

Affected: Ubuntu:16.04:LTS: python-cryptography, Ubuntu:18.04:LTS: python-cryptography, Ubuntu:20.04:LTS: python-cryptography

python-cryptography 3.2 is vulnerable to Bleichenbacher timing attacks in the RSA decryption API, via timed processing of valid PKCS#1 v1.5 ciphertext.

WID-SEC-W-2023-0557 — python-cryptography: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in python-cryptography ausnutzen, um Sicherheitsvorkehrungen zu umgehen.