It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decrypt parts of the cipher text encrypted with RSA.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python3-rsaUpgrade python2-rsa | Jul 21, 2023 | Nov 12, 2020 |
| Centos_linux | — | Upgrade librados-devel-debuginfoUpgrade nfs-ganesha-debugsourceUpgrade nfs-ganesha-rados-graceUpgrade ceph-ansibleUpgrade ceph-mds-debuginfoUpgrade librgw2-debuginfoUpgrade python3-radosUpgrade rbd-mirrorUpgrade ceph-fuseUpgrade python3-rgw-debuginfoUpgrade rbd-fuse-debuginfoUpgrade python-cephfsUpgrade ceph-fuse-debuginfoUpgrade libradosstriper1-debuginfoUpgrade ceph-commonUpgrade ceph-debuginfoUpgrade nfs-ganeshaUpgrade ceph-selinuxUpgrade libntirpcUpgrade python-ceph-argparseUpgrade libradosstriper1Upgrade ceph-common-debuginfoUpgrade nfs-ganesha-rados-urlsUpgrade python3-rbdUpgrade libcephfs-develUpgrade python3-rbd-debuginfoUpgrade librbd-develUpgrade nfs-ganesha-rados-urls-debuginfoUpgrade rbd-nbdUpgrade ceph-iscsiUpgrade ceph-radosgwUpgrade nfs-ganesha-debuginfoUpgrade libradospp-develUpgrade python-rgwUpgrade nfs-ganesha-vfsUpgrade ceph-radosgw-debuginfoUpgrade python3-rados-debuginfoUpgrade python3-cephfs-debuginfoUpgrade python3-rgwUpgrade ceph-mdsUpgrade tcmu-runnerUpgrade nfs-ganesha-rgwUpgrade libtcmuUpgrade ceph-osd-debuginfoUpgrade ceph-test-debuginfoUpgrade ceph-baseUpgrade librgw2Upgrade nfs-ganesha-vfs-debuginfoUpgrade libntirpc-debuginfoUpgrade ceph-debugsourceUpgrade rbd-mirror-debuginfoUpgrade python3-ceph-argparseUpgrade libcephfs2-debuginfoUpgrade nfs-ganesha-selinuxUpgrade nfs-ganesha-rgw-debuginfoUpgrade rbd-nbd-debuginfoUpgrade nfs-ganesha-rados-grace-debuginfoUpgrade ceph-grafana-dashboardsUpgrade nfs-ganesha-proxy-debuginfoUpgrade nfs-ganesha-proxyUpgrade nfs-ganesha-ceph-debuginfoUpgrade nfs-ganesha-cephUpgrade librgw-develUpgrade librados-develUpgrade libcephfs2Upgrade ceph-mgr-debuginfoUpgrade ceph-base-debuginfoUpgrade python3-cephfsUpgrade ceph-mon-debuginfoUpgrade libntirpc-debugsource | May 6, 2022 | Nov 12, 2020 |
| Debian | — | No solution exists | May 15, 2025 | Nov 12, 2020 |
| Redhat Openshift | — | Upgrade python-rsa | Mar 4, 2021 | Nov 9, 2020 |
| Redhat_linux | — | Upgrade ceph-iscsiUpgrade python3-cephfs-debuginfoUpgrade ceph-mdsUpgrade ceph-mgr-debuginfoUpgrade rbd-mirror-debuginfoUpgrade tcmu-runnerUpgrade libcephfs2-debuginfoUpgrade nfs-ganesha-selinuxUpgrade nfs-ganesha-rados-graceUpgrade nfs-ganesha-rgw-debuginfoUpgrade ceph-radosgwUpgrade ceph-grafana-dashboardsUpgrade python3-cephfsUpgrade nfs-ganesha-proxy-debuginfoUpgrade ceph-radosgw-debuginfoUpgrade nfs-ganesha-vfs-debuginfoUpgrade nfs-ganesha-ceph-debuginfoUpgrade ceph-base-debuginfoUpgrade nfs-ganesha-rgwUpgrade libntirpc-debugsourceUpgrade librados-develUpgrade librgw-develUpgrade python3-rgwUpgrade ceph-mon-debuginfoUpgrade nfs-ganesha-cephUpgrade python3-ceph-argparseUpgrade libcephfs2Upgrade rbd-nbd-debuginfoUpgrade librgw2Upgrade ceph-test-debuginfoUpgrade ceph-osd-debuginfoUpgrade libntirpc-debuginfoUpgrade ceph-debugsourceUpgrade nfs-ganesha-debugsourceUpgrade ceph-commonUpgrade nfs-ganesha-rados-urls-debuginfoUpgrade nfs-ganesha-rados-urlsUpgrade python3-rbd-debuginfoUpgrade nfs-ganesha-vfsUpgrade ceph-selinuxUpgrade ceph-debuginfoUpgrade libntirpcUpgrade ceph-fuse-debuginfoUpgrade rbd-fuse-debuginfoUpgrade nfs-ganeshaUpgrade nfs-ganesha-proxyUpgrade python3-rados-debuginfoUpgrade ceph-common-debuginfoNo solution existsUpgrade libcephfs-develUpgrade rbd-nbdUpgrade ceph-fuseUpgrade python3-rbdUpgrade nfs-ganesha-rados-grace-debuginfoUpgrade libradosstriper1-debuginfoUpgrade python-rgwUpgrade ceph-mds-debuginfoUpgrade libradospp-develUpgrade nfs-ganesha-debuginfoUpgrade python-ceph-argparseUpgrade rbd-mirrorUpgrade libradosstriper1Upgrade librgw2-debuginfoUpgrade librbd-develUpgrade python3-radosUpgrade libtcmuUpgrade python-cephfsUpgrade ceph-baseUpgrade ceph-ansibleUpgrade librados-devel-debuginfoUpgrade python3-rgw-debuginfo | May 6, 2022 | Nov 12, 2020 |
| Suse | — | Upgrade python2-rsaUpgrade python-rsaUpgrade python3-rsa | Aug 9, 2024 | Nov 12, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub