CPE Details
Python-RSA Project Python-RSA 2.1
2.1
2020-11-23
22h54 +00:00
22h54 +00:00
2020-11-23
22h54 +00:00
22h54 +00:00
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
CPE Name: cpe:2.3:a:python-rsa_project:python-rsa:2.1:*:*:*:*:*:*:*
Informations
Vendor
python-rsa_projectProduct
python-rsaVersion
2.1Related CVE
| CVE ID | Published | Description | Score | Severity |
|---|---|---|---|---|
| It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decrypt parts of the cipher text encrypted with RSA. | 7.5 |
High |
||
| Python-RSA before 4.1 ignores leading '\0' bytes during decryption of ciphertext. This could conceivably have a security-relevant impact, e.g., by helping an attacker to infer that an application uses Python-RSA, or if the length of accepted ciphertext affects application behavior (such as by causing excessive memory allocation). | 7.5 |
High |
