This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2020-25658 →

DEBIAN-CVE-2020-25658

It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decrypt parts...

Original description

The description as published by the source.

It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decrypt parts of the cipher text encrypted with RSA.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 python-rsa

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:13 python-rsa

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:14 python-rsa

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

References

advisory security-tracker.debian.org