It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decrypt parts of the cipher text encrypted with RSA.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python3-rsaUpgrade python2-rsa | Jul 21, 2023 | Nov 12, 2020 |
| Centos_linux | — | Upgrade python3-cephfs-debuginfoUpgrade libtcmuUpgrade librgw2Upgrade ceph-baseUpgrade libntirpc-debugsourceUpgrade ceph-mdsUpgrade ceph-osd-debuginfoUpgrade nfs-ganesha-rgwUpgrade nfs-ganesha-rados-grace-debuginfoUpgrade rbd-nbd-debuginfoUpgrade nfs-ganesha-rgw-debuginfoUpgrade python3-rados-debuginfoUpgrade nfs-ganesha-selinuxUpgrade libcephfs2-debuginfoUpgrade ceph-mgr-debuginfoUpgrade tcmu-runnerUpgrade nfs-ganesha-proxy-debuginfoUpgrade python3-cephfsUpgrade ceph-base-debuginfoUpgrade ceph-mon-debuginfoUpgrade ceph-grafana-dashboardsUpgrade ceph-debugsourceUpgrade rbd-mirror-debuginfoUpgrade python3-ceph-argparseUpgrade nfs-ganesha-proxyUpgrade nfs-ganesha-vfs-debuginfoUpgrade ceph-test-debuginfoUpgrade librados-develUpgrade libntirpc-debuginfoUpgrade python3-rgwUpgrade libcephfs2Upgrade ceph-radosgw-debuginfoUpgrade librgw-develUpgrade nfs-ganesha-cephUpgrade nfs-ganesha-ceph-debuginfoUpgrade python3-rgw-debuginfoUpgrade ceph-common-debuginfoUpgrade libcephfs-develUpgrade nfs-ganesha-rados-urls-debuginfoUpgrade nfs-ganesha-rados-urlsUpgrade ceph-selinuxUpgrade rbd-fuse-debuginfoUpgrade libradosstriper1-debuginfoUpgrade libradospp-develUpgrade ceph-iscsiUpgrade python-cephfsUpgrade python3-rbdUpgrade librgw2-debuginfoUpgrade python3-radosUpgrade librados-devel-debuginfoUpgrade ceph-mds-debuginfoUpgrade python3-rbd-debuginfoUpgrade ceph-fuse-debuginfoUpgrade nfs-ganesha-debuginfoUpgrade python-rgwUpgrade ceph-radosgwUpgrade ceph-fuseUpgrade ceph-commonUpgrade librbd-develUpgrade ceph-debuginfoUpgrade rbd-nbdUpgrade rbd-mirrorUpgrade python-ceph-argparseUpgrade nfs-ganesha-rados-graceUpgrade nfs-ganesha-debugsourceUpgrade ceph-ansibleUpgrade libntirpcUpgrade nfs-ganeshaUpgrade libradosstriper1Upgrade nfs-ganesha-vfs | May 6, 2022 | Nov 12, 2020 |
| Debian | — | No solution exists | May 15, 2025 | Nov 12, 2020 |
| Redhat Openshift | — | Upgrade python-rsa | Mar 4, 2021 | Nov 9, 2020 |
| Redhat_linux | — | Upgrade libradosstriper1-debuginfoUpgrade nfs-ganesha-debugsourceUpgrade nfs-ganesha-debuginfoUpgrade python3-radosUpgrade librados-devel-debuginfoUpgrade python3-rbdUpgrade ceph-ansibleUpgrade python-cephfsUpgrade python-rgwUpgrade ceph-fuse-debuginfoUpgrade ceph-mds-debuginfoUpgrade ceph-debuginfoUpgrade librgw2-debuginfoUpgrade python3-rados-debuginfoUpgrade librbd-develUpgrade rbd-mirrorUpgrade libradospp-develUpgrade ceph-baseUpgrade nfs-ganesha-vfsUpgrade libtcmuUpgrade libntirpcUpgrade rbd-fuse-debuginfoUpgrade ceph-common-debuginfoUpgrade python3-rgw-debuginfoUpgrade nfs-ganeshaUpgrade nfs-ganesha-rados-urls-debuginfoUpgrade ceph-commonUpgrade rbd-nbdUpgrade ceph-selinuxUpgrade libradosstriper1Upgrade libcephfs-develNo solution existsUpgrade ceph-fuseUpgrade nfs-ganesha-proxyUpgrade python-ceph-argparseUpgrade nfs-ganesha-rados-urlsUpgrade nfs-ganesha-rados-grace-debuginfoUpgrade python3-rbd-debuginfoUpgrade python3-ceph-argparseUpgrade libcephfs2Upgrade nfs-ganesha-cephUpgrade python3-rgwUpgrade librgw-develUpgrade ceph-test-debuginfoUpgrade ceph-mdsUpgrade ceph-osd-debuginfoUpgrade rbd-nbd-debuginfoUpgrade libntirpc-debuginfoUpgrade libcephfs2-debuginfoUpgrade nfs-ganesha-ceph-debuginfoUpgrade nfs-ganesha-proxy-debuginfoUpgrade librados-develUpgrade python3-cephfsUpgrade ceph-mgr-debuginfoUpgrade tcmu-runnerUpgrade nfs-ganesha-rgwUpgrade ceph-base-debuginfoUpgrade nfs-ganesha-selinuxUpgrade ceph-grafana-dashboardsUpgrade ceph-iscsiUpgrade libntirpc-debugsourceUpgrade ceph-debugsourceUpgrade ceph-radosgw-debuginfoUpgrade rbd-mirror-debuginfoUpgrade librgw2Upgrade nfs-ganesha-rados-graceUpgrade python3-cephfs-debuginfoUpgrade nfs-ganesha-vfs-debuginfoUpgrade ceph-mon-debuginfoUpgrade ceph-radosgwUpgrade nfs-ganesha-rgw-debuginfo | May 6, 2022 | Nov 12, 2020 |
| Suse | — | Upgrade python2-rsaUpgrade python-rsaUpgrade python3-rsa | Aug 9, 2024 | Nov 12, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub