CVE-2020-25659

Опубликовано: 11 янв. 2021

Источник: nvd

CVSS3: 5.9

CVSS2: 4.3

EPSS Низкий

Описание

python-cryptography 3.2 is vulnerable to Bleichenbacher timing attacks in the RSA decryption API, via timed processing of valid PKCS#1 v1.5 ciphertext.

Ссылки

https://github.com/pyca/cryptography/pull/5507/commits/ce1bef6f1ee06ac497ca0c837fbd1c7ef6c2472b
Patch
Third Party Advisory
https://www.oracle.com/security-alerts/cpuapr2022.html
Patch
Third Party Advisory
https://www.oracle.com/security-alerts/cpujul2022.html
Patch
Third Party Advisory
https://github.com/pyca/cryptography/pull/5507/commits/ce1bef6f1ee06ac497ca0c837fbd1c7ef6c2472b
Patch
Third Party Advisory
https://www.oracle.com/security-alerts/cpuapr2022.html
Patch
Third Party Advisory
https://www.oracle.com/security-alerts/cpujul2022.html
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:cryptography.io:cryptography:3.2:*:*:*:*:python:*:*

Конфигурация 2

cpe:2.3:a:oracle:communications_cloud_native_core_network_function_cloud_native_environment:1.10.0:*:*:*:*:*:*:*

EPSS

Процентиль: 49%

0.00252

Низкий

5.9 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-385

NVD-CWE-Other

Связанные уязвимости

CVE-2020-25659

CVSS3: 5.9

ubuntu

больше 4 лет назад

python-cryptography 3.2 is vulnerable to Bleichenbacher timing attacks in the RSA decryption API, via timed processing of valid PKCS#1 v1.5 ciphertext.

CVE-2020-25659

CVSS3: 5.9

redhat

больше 4 лет назад

python-cryptography 3.2 is vulnerable to Bleichenbacher timing attacks in the RSA decryption API, via timed processing of valid PKCS#1 v1.5 ciphertext.

CVE-2020-25659

CVSS3: 5.9

msrc

больше 4 лет назад

Описание отсутствует

CVE-2020-25659

CVSS3: 5.9

debian

больше 4 лет назад

python-cryptography 3.2 is vulnerable to Bleichenbacher timing attacks ...

openSUSE-SU-2020:2173-1

suse-cvrf

больше 4 лет назад

Security update for python-cryptography

EPSS

Процентиль: 49%

0.00252

Низкий

5.9 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-385

NVD-CWE-Other