Описание
A flaw was found in the python-cryptography package. This issue may allow a remote attacker to decrypt captured messages in TLS servers that use RSA key exchanges, which may lead to exposure of confidential or sensitive data.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | ignored | end of standard support |
| devel | not-affected | 41.0.7-4build3 |
| esm-infra-legacy/xenial | released | 1.2.3-1ubuntu0.3+esm1 |
| esm-infra/bionic | released | 2.1.4-1ubuntu1.4+esm1 |
| esm-infra/focal | released | 2.8-3ubuntu0.3 |
| esm-infra/xenial | released | 1.2.3-1ubuntu0.3+esm1 |
| focal | released | 2.8-3ubuntu0.3 |
| jammy | released | 3.4.8-1ubuntu2.2 |
| lunar | ignored | end of life, was deferred [2024-02-19] |
| mantic | released | 38.0.4-4ubuntu0.23.10.2 |
Показывать по
Ссылки на источники
EPSS
7.5 High
CVSS3
Связанные уязвимости
A flaw was found in the python-cryptography package. This issue may allow a remote attacker to decrypt captured messages in TLS servers that use RSA key exchanges, which may lead to exposure of confidential or sensitive data.
A flaw was found in the python-cryptography package. This issue may allow a remote attacker to decrypt captured messages in TLS servers that use RSA key exchanges, which may lead to exposure of confidential or sensitive data.
Python-cryptography: bleichenbacher timing oracle attack against rsa decryption - incomplete fix for cve-2020-25659
A flaw was found in the python-cryptography package. This issue may al ...
EPSS
7.5 High
CVSS3