Published: 11/01/2021 Updated: 09/02/2023

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 5.9 | Impact Score: 3.6 | Exploitability Score: 2.2

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N

Subscribe to Python-cryptography Project

python-cryptography 3.2 is vulnerable to Bleichenbacher timing attacks in the RSA decryption API, via timed processing of valid PKCS#1 v1.5 ciphertext.

Vulnerable Product	Search on Vulmon	Subscribe to Product
python-cryptography project python-cryptography 3.2
oracle communications cloud native core network function cloud native environment 1.10.0

Debian Bug report logs - #973247 python-cryptography: CVE-2020-25659: Bleichenbacher timing oracle attack against RSA decryption Package: src:python-cryptography; Maintainer for src:python-cryptography is Tristan Seligmann <mithrandi@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Tue, 27 Oct ...

Debian Bug report logs - #1059308 python-cryptography: CVE-2023-50782 Package: src:python-cryptography; Maintainer for src:python-cryptography is Tristan Seligmann <mithrandi@debianorg>; Reported by: Moritz Mühlenhoff <jmm@inutilorg> Date: Fri, 22 Dec 2023 13:39:02 UTC Severity: important Tags: security, upstream ...

FEATURE: SmartFix for Python The feature provides the minimum fix version of a given vulnerable direct that solves the biggest amount of vulnerabilities on top of a Pull-Request DEPENDENCY lyrebird==0105 VULNERABLE TRANSITIVE DEPENDENCIES mitmproxy==403 cryptography==222 VULNERABILITIES mitmproxy==403 -> CVE-2018-14505 cryptography==222 -> CVE-2020-

NVD-CWE-Other https://github.com/pyca/cryptography/pull/5507/commits/ce1bef6f1ee06ac497ca0c837fbd1c7ef6c2472b https://www.oracle.com/security-alerts/cpuapr2022.html https://www.oracle.com/security-alerts/cpujul2022.html https://nvd.nist.gov https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=973247

CVE-2020-25659

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Github Repositories

References

Vulmon Search

About

Products

Connect