python-cryptography 3.2 is vulnerable to Bleichenbacher timing attacks in the RSA decryption API, via timed processing of valid PKCS#1 v1.5 ciphertext.
References
| Link | Resource |
|---|---|
| https://github.com/pyca/cryptography/pull/5507/commits/ce1bef6f1ee06ac497ca0c837fbd1c7ef6c2472b | Patch Third Party Advisory |
| https://www.oracle.com/security-alerts/cpuapr2022.html | Patch Third Party Advisory |
| https://www.oracle.com/security-alerts/cpujul2022.html | Patch Third Party Advisory |
Configurations
History
09 Sep 2024, 13:52
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:cryptography.io:cryptography:3.2:*:*:*:*:python:*:* |
05 Sep 2024, 16:10
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Cryptography.io cryptography
Cryptography.io |
|
| CPE | cpe:2.3:a:cryptography.io:cryptography:3.2:*:*:*:*:*:*:* |
25 Jul 2022, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
12 May 2022, 14:51
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:oracle:communications_cloud_native_core_network_function_cloud_native_environment:1.10.0:*:*:*:*:*:*:* | |
| References | (MISC) https://www.oracle.com/security-alerts/cpuapr2022.html - Patch, Third Party Advisory | |
| CWE | NVD-CWE-Other |
20 Apr 2022, 00:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
Information
Published : 2021-01-11 16:15
Updated : 2024-09-09 13:52
NVD link : CVE-2020-25659
Mitre link : CVE-2020-25659
CVE.ORG link : CVE-2020-25659
JSON object : View
Products Affected
cryptography.io
- cryptography
oracle
- communications_cloud_native_core_network_function_cloud_native_environment
CWE