~ / search / GHSA-xrx6-fmxq-rjj2

GHSA-xrx6-fmxq-rjj2

Timing attacks in python-rsa

Source: GitHub Advisory Database (reviewed) High CVE-2020-25658

Packages

EcosystemPackageAffectedFixed in
PyPI rsa >= 2.1, < 4.7 4.7

Details

As written in the advisory (Markdown source, shown as plain text).

It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decrypt parts of the cipher text encrypted with RSA

References

External links from the advisory. They lead to third-party sites.