rpm package
suse/python-rsa&distro=SUSE OpenStack Cloud 7
pkg:rpm/suse/python-rsa&distro=SUSE%20OpenStack%20Cloud%207
Vulnerabilities (2)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2020-13757 | — | < 3.1.4-12.16.1 | 3.1.4-12.16.1 | Jun 1, 2020 | Python-RSA before 4.1 ignores leading '\0' bytes during decryption of ciphertext. This could conceivably have a security-relevant impact, e.g., by helping an attacker to infer that an application uses Python-RSA, or if the length of accepted ciphertext affects application behavio | ||
| CVE-2016-9015 | Low | 3.7 | < 3.1.4-12.9.17 | 3.1.4-12.9.17 | Jan 11, 2017 | Versions 1.17 and 1.18 of the Python urllib3 library suffer from a vulnerability that can cause them, in certain configurations, to not correctly validate TLS certificates. This places users of the library with those configurations at risk of man-in-the-middle and information lea |
- CVE-2020-13757Jun 1, 2020affected < 3.1.4-12.16.1fixed 3.1.4-12.16.1
Python-RSA before 4.1 ignores leading '\0' bytes during decryption of ciphertext. This could conceivably have a security-relevant impact, e.g., by helping an attacker to infer that an application uses Python-RSA, or if the length of accepted ciphertext affects application behavio
- affected < 3.1.4-12.9.17fixed 3.1.4-12.9.17
Versions 1.17 and 1.18 of the Python urllib3 library suffer from a vulnerability that can cause them, in certain configurations, to not correctly validate TLS certificates. This places users of the library with those configurations at risk of man-in-the-middle and information lea