Name: CVE-2020-25658: Covert Timing Channel
Creator: Rapid7
Published: 2020-11-12T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2020-25658, CWE-385, CWE-327, CVSS 7.5, EPSS 0.01651

It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decrypt parts of the cipher text encrypted with RSA.

CVSS Details

CVSS 3.1 Base Score: 7.5
CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Amazon Linux Ami 2	—	Upgrade python3-rsaUpgrade python2-rsa	Jul 21, 2023	Nov 12, 2020
Centos_linux	—	Upgrade librados-devel-debuginfoUpgrade nfs-ganesha-debugsourceUpgrade nfs-ganesha-rados-graceUpgrade ceph-ansibleUpgrade ceph-mds-debuginfoUpgrade librgw2-debuginfoUpgrade python3-radosUpgrade rbd-mirrorUpgrade ceph-fuseUpgrade python3-rgw-debuginfoUpgrade rbd-fuse-debuginfoUpgrade python-cephfsUpgrade ceph-fuse-debuginfoUpgrade libradosstriper1-debuginfoUpgrade ceph-commonUpgrade ceph-debuginfoUpgrade nfs-ganeshaUpgrade ceph-selinuxUpgrade libntirpcUpgrade python-ceph-argparseUpgrade libradosstriper1Upgrade ceph-common-debuginfoUpgrade nfs-ganesha-rados-urlsUpgrade python3-rbdUpgrade libcephfs-develUpgrade python3-rbd-debuginfoUpgrade librbd-develUpgrade nfs-ganesha-rados-urls-debuginfoUpgrade rbd-nbdUpgrade ceph-iscsiUpgrade ceph-radosgwUpgrade nfs-ganesha-debuginfoUpgrade libradospp-develUpgrade python-rgwUpgrade nfs-ganesha-vfsUpgrade ceph-radosgw-debuginfoUpgrade python3-rados-debuginfoUpgrade python3-cephfs-debuginfoUpgrade python3-rgwUpgrade ceph-mdsUpgrade tcmu-runnerUpgrade nfs-ganesha-rgwUpgrade libtcmuUpgrade ceph-osd-debuginfoUpgrade ceph-test-debuginfoUpgrade ceph-baseUpgrade librgw2Upgrade nfs-ganesha-vfs-debuginfoUpgrade libntirpc-debuginfoUpgrade ceph-debugsourceUpgrade rbd-mirror-debuginfoUpgrade python3-ceph-argparseUpgrade libcephfs2-debuginfoUpgrade nfs-ganesha-selinuxUpgrade nfs-ganesha-rgw-debuginfoUpgrade rbd-nbd-debuginfoUpgrade nfs-ganesha-rados-grace-debuginfoUpgrade ceph-grafana-dashboardsUpgrade nfs-ganesha-proxy-debuginfoUpgrade nfs-ganesha-proxyUpgrade nfs-ganesha-ceph-debuginfoUpgrade nfs-ganesha-cephUpgrade librgw-develUpgrade librados-develUpgrade libcephfs2Upgrade ceph-mgr-debuginfoUpgrade ceph-base-debuginfoUpgrade python3-cephfsUpgrade ceph-mon-debuginfoUpgrade libntirpc-debugsource	May 6, 2022	Nov 12, 2020
Debian	—	No solution exists	May 15, 2025	Nov 12, 2020
Redhat Openshift	—	Upgrade python-rsa	Mar 4, 2021	Nov 9, 2020
Redhat_linux	—	Upgrade ceph-iscsiUpgrade python3-cephfs-debuginfoUpgrade ceph-mdsUpgrade ceph-mgr-debuginfoUpgrade rbd-mirror-debuginfoUpgrade tcmu-runnerUpgrade libcephfs2-debuginfoUpgrade nfs-ganesha-selinuxUpgrade nfs-ganesha-rados-graceUpgrade nfs-ganesha-rgw-debuginfoUpgrade ceph-radosgwUpgrade ceph-grafana-dashboardsUpgrade python3-cephfsUpgrade nfs-ganesha-proxy-debuginfoUpgrade ceph-radosgw-debuginfoUpgrade nfs-ganesha-vfs-debuginfoUpgrade nfs-ganesha-ceph-debuginfoUpgrade ceph-base-debuginfoUpgrade nfs-ganesha-rgwUpgrade libntirpc-debugsourceUpgrade librados-develUpgrade librgw-develUpgrade python3-rgwUpgrade ceph-mon-debuginfoUpgrade nfs-ganesha-cephUpgrade python3-ceph-argparseUpgrade libcephfs2Upgrade rbd-nbd-debuginfoUpgrade librgw2Upgrade ceph-test-debuginfoUpgrade ceph-osd-debuginfoUpgrade libntirpc-debuginfoUpgrade ceph-debugsourceUpgrade nfs-ganesha-debugsourceUpgrade ceph-commonUpgrade nfs-ganesha-rados-urls-debuginfoUpgrade nfs-ganesha-rados-urlsUpgrade python3-rbd-debuginfoUpgrade nfs-ganesha-vfsUpgrade ceph-selinuxUpgrade ceph-debuginfoUpgrade libntirpcUpgrade ceph-fuse-debuginfoUpgrade rbd-fuse-debuginfoUpgrade nfs-ganeshaUpgrade nfs-ganesha-proxyUpgrade python3-rados-debuginfoUpgrade ceph-common-debuginfoNo solution existsUpgrade libcephfs-develUpgrade rbd-nbdUpgrade ceph-fuseUpgrade python3-rbdUpgrade nfs-ganesha-rados-grace-debuginfoUpgrade libradosstriper1-debuginfoUpgrade python-rgwUpgrade ceph-mds-debuginfoUpgrade libradospp-develUpgrade nfs-ganesha-debuginfoUpgrade python-ceph-argparseUpgrade rbd-mirrorUpgrade libradosstriper1Upgrade librgw2-debuginfoUpgrade librbd-develUpgrade python3-radosUpgrade libtcmuUpgrade python-cephfsUpgrade ceph-baseUpgrade ceph-ansibleUpgrade librados-devel-debuginfoUpgrade python3-rgw-debuginfo	May 6, 2022	Nov 12, 2020
Suse	—	Upgrade python2-rsaUpgrade python-rsaUpgrade python3-rsa	Aug 9, 2024	Nov 12, 2020

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business