It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decrypt parts of the cipher text encrypted with RSA.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python3-rsaUpgrade python2-rsa | Jul 21, 2023 | Nov 12, 2020 |
| Centos_linux | — | Upgrade rbd-mirrorUpgrade librgw2-debuginfoUpgrade ceph-mds-debuginfoUpgrade python3-radosUpgrade librados-devel-debuginfoUpgrade python-cephfsUpgrade nfs-ganeshaUpgrade ceph-selinuxUpgrade ceph-fuse-debuginfoUpgrade python3-rbd-debuginfoUpgrade ceph-fuseUpgrade ceph-radosgwUpgrade nfs-ganesha-debuginfoUpgrade ceph-ansibleUpgrade nfs-ganesha-debugsourceUpgrade rbd-fuse-debuginfoUpgrade nfs-ganesha-rados-graceUpgrade libradosstriper1-debuginfoUpgrade python3-rgw-debuginfoUpgrade python-ceph-argparseUpgrade libradosstriper1Upgrade libntirpcUpgrade ceph-debuginfoUpgrade ceph-common-debuginfoUpgrade rbd-nbdUpgrade nfs-ganesha-vfsUpgrade ceph-commonUpgrade ceph-iscsiUpgrade nfs-ganesha-rados-urlsUpgrade python3-rbdUpgrade nfs-ganesha-rados-urls-debuginfoUpgrade libradospp-develUpgrade python-rgwUpgrade librbd-develUpgrade libcephfs-develUpgrade nfs-ganesha-rados-grace-debuginfoUpgrade ceph-radosgw-debuginfoUpgrade ceph-base-debuginfoUpgrade rbd-nbd-debuginfoUpgrade nfs-ganesha-selinuxUpgrade nfs-ganesha-rgw-debuginfoUpgrade librgw2Upgrade ceph-baseUpgrade ceph-test-debuginfoUpgrade libntirpc-debugsourceUpgrade python3-rgwUpgrade librgw-develUpgrade tcmu-runnerUpgrade nfs-ganesha-rgwUpgrade libcephfs2-debuginfoUpgrade ceph-mdsUpgrade nfs-ganesha-proxyUpgrade libntirpc-debuginfoUpgrade python3-rados-debuginfoUpgrade python3-cephfs-debuginfoUpgrade ceph-osd-debuginfoUpgrade ceph-mon-debuginfoUpgrade nfs-ganesha-ceph-debuginfoUpgrade librados-develUpgrade libcephfs2Upgrade ceph-mgr-debuginfoUpgrade nfs-ganesha-cephUpgrade nfs-ganesha-proxy-debuginfoUpgrade libtcmuUpgrade rbd-mirror-debuginfoUpgrade nfs-ganesha-vfs-debuginfoUpgrade ceph-grafana-dashboardsUpgrade ceph-debugsourceUpgrade python3-ceph-argparseUpgrade python3-cephfs | May 6, 2022 | Nov 12, 2020 |
| Debian | — | No solution exists | May 15, 2025 | Nov 12, 2020 |
| Redhat Openshift | — | Upgrade python-rsa | Mar 4, 2021 | Nov 9, 2020 |
| Redhat_linux | — | Upgrade libntirpc-debugsourceUpgrade ceph-test-debuginfoUpgrade python3-ceph-argparseUpgrade ceph-debugsourceUpgrade ceph-base-debuginfoUpgrade nfs-ganesha-proxy-debuginfoUpgrade python3-cephfsUpgrade ceph-radosgw-debuginfoUpgrade rbd-mirror-debuginfoUpgrade nfs-ganesha-rados-graceUpgrade nfs-ganesha-rgwUpgrade rbd-nbd-debuginfoUpgrade libcephfs2Upgrade librgw-develUpgrade librados-develUpgrade nfs-ganesha-vfs-debuginfoUpgrade ceph-mdsUpgrade python3-cephfs-debuginfoUpgrade nfs-ganesha-selinuxUpgrade ceph-osd-debuginfoUpgrade librgw2Upgrade ceph-mon-debuginfoUpgrade nfs-ganesha-ceph-debuginfoUpgrade tcmu-runnerUpgrade ceph-grafana-dashboardsUpgrade ceph-radosgwUpgrade ceph-mgr-debuginfoUpgrade libntirpc-debuginfoUpgrade libcephfs2-debuginfoUpgrade nfs-ganesha-cephUpgrade ceph-iscsiUpgrade python3-rgwUpgrade nfs-ganesha-rgw-debuginfoUpgrade rbd-nbdUpgrade nfs-ganesha-rados-grace-debuginfoUpgrade librgw2-debuginfoUpgrade rbd-mirrorUpgrade libtcmuUpgrade ceph-baseUpgrade ceph-fuseUpgrade python3-rbd-debuginfoUpgrade ceph-selinuxUpgrade python-ceph-argparseUpgrade ceph-commonUpgrade ceph-common-debuginfoUpgrade python3-rados-debuginfoNo solution existsUpgrade python3-rbdUpgrade ceph-mds-debuginfoUpgrade python-rgwUpgrade libradosstriper1Upgrade libcephfs-develUpgrade librbd-develUpgrade python3-radosUpgrade ceph-debuginfoUpgrade nfs-ganesha-rados-urls-debuginfoUpgrade rbd-fuse-debuginfoUpgrade ceph-fuse-debuginfoUpgrade libntirpcUpgrade libradospp-develUpgrade nfs-ganesha-vfsUpgrade nfs-ganesha-rados-urlsUpgrade nfs-ganesha-debugsourceUpgrade nfs-ganeshaUpgrade python3-rgw-debuginfoUpgrade ceph-ansibleUpgrade python-cephfsUpgrade librados-devel-debuginfoUpgrade nfs-ganesha-proxyUpgrade libradosstriper1-debuginfoUpgrade nfs-ganesha-debuginfo | May 6, 2022 | Nov 12, 2020 |
| Suse | — | Upgrade python3-rsaUpgrade python-rsaUpgrade python2-rsa | Aug 9, 2024 | Nov 12, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub