Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-944j-8ch6-rf6x

Опубликовано: 05 фев. 2024
Источник: github
Github: Прошло ревью
CVSS3: 5.9

Описание

m2crypto Bleichenbacher timing attack - incomplete fix for CVE-2020-25657

A flaw was found in m2crypto. This issue may allow a remote attacker to decrypt captured messages in TLS servers that use RSA key exchanges, which may lead to exposure of confidential or sensitive data.

Пакеты

Наименование

m2crypto

pip
Затронутые версииВерсия исправления

<= 0.40.1

Отсутствует

EPSS

Процентиль: 66%
0.01124
Низкий

5.9 Medium

CVSS3

Дефекты

CWE-203
CWE-208
CWE-385

Связанные уязвимости

CVSS3: 7.5
ubuntu
почти 3 года назад

A flaw was found in m2crypto. This issue may allow a remote attacker to decrypt captured messages in TLS servers that use RSA key exchanges, which may lead to exposure of confidential or sensitive data.

CVSS3: 7.5
redhat
почти 3 года назад

A flaw was found in m2crypto. This issue may allow a remote attacker to decrypt captured messages in TLS servers that use RSA key exchanges, which may lead to exposure of confidential or sensitive data.

CVSS3: 7.5
nvd
почти 3 года назад

A flaw was found in m2crypto. This issue may allow a remote attacker to decrypt captured messages in TLS servers that use RSA key exchanges, which may lead to exposure of confidential or sensitive data.

CVSS3: 7.5
msrc
около 2 месяцев назад

M2crypto: bleichenbacher timing attacks in the rsa decryption api - incomplete fix for cve-2020-25657

CVSS3: 7.5
debian
почти 3 года назад

A flaw was found in m2crypto. This issue may allow a remote attacker t ...

EPSS

Процентиль: 66%
0.01124
Низкий

5.9 Medium

CVSS3

Дефекты

CWE-203
CWE-208
CWE-385