It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decrypt parts of the cipher text encrypted with RSA.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python2-rsaUpgrade python3-rsa | Jul 21, 2023 | Nov 12, 2020 |
| Centos_linux | — | Upgrade libntirpc-debuginfoUpgrade ceph-grafana-dashboardsUpgrade python3-ceph-argparseUpgrade rbd-mirror-debuginfoUpgrade ceph-debugsourceUpgrade libtcmuUpgrade ceph-mon-debuginfoUpgrade python3-rados-debuginfoUpgrade nfs-ganesha-rgw-debuginfoUpgrade ceph-osd-debuginfoUpgrade ceph-test-debuginfoUpgrade nfs-ganesha-vfs-debuginfoUpgrade python3-cephfs-debuginfoUpgrade libntirpc-debugsourceUpgrade python3-rgwUpgrade rbd-nbd-debuginfoUpgrade ceph-baseUpgrade librgw2Upgrade nfs-ganesha-proxy-debuginfoUpgrade ceph-radosgw-debuginfoUpgrade librgw-develUpgrade nfs-ganesha-cephUpgrade librados-develUpgrade nfs-ganesha-ceph-debuginfoUpgrade libcephfs2Upgrade nfs-ganesha-proxyUpgrade nfs-ganesha-selinuxUpgrade ceph-mdsUpgrade libcephfs2-debuginfoUpgrade tcmu-runnerUpgrade nfs-ganesha-rgwUpgrade nfs-ganesha-rados-grace-debuginfoUpgrade python3-cephfsUpgrade ceph-base-debuginfoUpgrade ceph-mgr-debuginfoUpgrade librados-devel-debuginfoUpgrade ceph-debuginfoUpgrade nfs-ganesha-rados-urls-debuginfoUpgrade nfs-ganesha-rados-urlsUpgrade libcephfs-develUpgrade python-cephfsUpgrade ceph-common-debuginfoUpgrade rbd-fuse-debuginfoUpgrade python3-radosUpgrade ceph-radosgwUpgrade ceph-commonUpgrade rbd-nbdUpgrade python3-rbd-debuginfoUpgrade python3-rbdUpgrade nfs-ganesha-vfsUpgrade python3-rgw-debuginfoUpgrade libradospp-develUpgrade ceph-selinuxUpgrade ceph-iscsiUpgrade librbd-develUpgrade python-rgwUpgrade nfs-ganesha-debuginfoUpgrade ceph-fuseUpgrade libradosstriper1-debuginfoUpgrade rbd-mirrorUpgrade librgw2-debuginfoUpgrade ceph-mds-debuginfoUpgrade libntirpcUpgrade python-ceph-argparseUpgrade nfs-ganesha-rados-graceUpgrade nfs-ganesha-debugsourceUpgrade ceph-ansibleUpgrade nfs-ganeshaUpgrade libradosstriper1Upgrade ceph-fuse-debuginfo | May 6, 2022 | Nov 12, 2020 |
| Debian | — | No solution exists | May 15, 2025 | Nov 12, 2020 |
| Redhat Openshift | — | Upgrade python-rsa | Mar 4, 2021 | Nov 9, 2020 |
| Redhat_linux | — | Upgrade nfs-ganesha-vfsUpgrade rbd-fuse-debuginfoUpgrade nfs-ganesha-debuginfoUpgrade libradospp-develUpgrade rbd-mirrorUpgrade python3-rgw-debuginfoUpgrade rbd-nbdUpgrade ceph-ansibleUpgrade librbd-develUpgrade libtcmuUpgrade librados-devel-debuginfoUpgrade python-cephfsUpgrade python3-rbdUpgrade python3-rados-debuginfoUpgrade ceph-fuseUpgrade nfs-ganesha-rados-grace-debuginfoUpgrade nfs-ganeshaUpgrade python3-rbd-debuginfoUpgrade librgw2-debuginfoUpgrade libcephfs-develUpgrade libradosstriper1-debuginfoUpgrade nfs-ganesha-rados-urlsUpgrade ceph-mds-debuginfoUpgrade nfs-ganesha-rados-urls-debuginfoUpgrade python-ceph-argparseUpgrade ceph-commonUpgrade ceph-debuginfoUpgrade ceph-selinuxUpgrade nfs-ganesha-debugsourceUpgrade python3-radosUpgrade ceph-fuse-debuginfoUpgrade ceph-common-debuginfoNo solution existsUpgrade ceph-baseUpgrade python-rgwUpgrade libntirpcUpgrade libradosstriper1Upgrade nfs-ganesha-proxyUpgrade ceph-radosgw-debuginfoUpgrade librgw2Upgrade nfs-ganesha-vfs-debuginfoUpgrade nfs-ganesha-selinuxUpgrade tcmu-runnerUpgrade librgw-develUpgrade ceph-grafana-dashboardsUpgrade nfs-ganesha-rgwUpgrade ceph-mgr-debuginfoUpgrade ceph-test-debuginfoUpgrade ceph-base-debuginfoUpgrade ceph-iscsiUpgrade ceph-mon-debuginfoUpgrade nfs-ganesha-proxy-debuginfoUpgrade nfs-ganesha-cephUpgrade python3-cephfsUpgrade python3-rgwUpgrade libcephfs2-debuginfoUpgrade libntirpc-debuginfoUpgrade nfs-ganesha-rgw-debuginfoUpgrade python3-ceph-argparseUpgrade ceph-radosgwUpgrade libcephfs2Upgrade librados-develUpgrade rbd-nbd-debuginfoUpgrade nfs-ganesha-rados-graceUpgrade nfs-ganesha-ceph-debuginfoUpgrade python3-cephfs-debuginfoUpgrade ceph-osd-debuginfoUpgrade libntirpc-debugsourceUpgrade ceph-mdsUpgrade rbd-mirror-debuginfoUpgrade ceph-debugsource | May 6, 2022 | Nov 12, 2020 |
| Suse | — | Upgrade python2-rsaUpgrade python-rsaUpgrade python3-rsa | Aug 9, 2024 | Nov 12, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub