Python Rsa Project vulnerabilities
2 vulnerabilities
Known vulnerabilities in Python Rsa Project products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 1 product.
Products
1- Python Rsa2 vulnerabilities
PrioritiseCVE-2020-25658sybren a. stüvel · python-rsa +17 moresybren a. stüvel python-rsaIt was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decrypt parts of the cipher text encrypted with RSA.CVSS7.5HighEPSS1.65%PrioritiseCVE-2020-13757canonical · ubuntu_linux +29 morecanonical ubuntu_linuxPython-RSA before 4.1 ignores leading '\0' bytes during decryption of ciphertext. This could conceivably have a security-relevant impact, e.g., by helping an attacker to infer that an application uses Python-RSA, or if the length of accepted ciphertext affects application behavior (such as by causing excessive memory allocation).CVSS7.5HighEPSS1.43%