Executive brief
python-cryptography 3.2 is vulnerable to Bleichenbacher timing attacks in the RSA decryption API, via timed processing of valid PKCS#1 v1.5 ciphertext.
Affected products
- PyPI cryptography
Junglewise Threat Intelligence
CVE-2020-25659: PYSEC-2021-62 - python-cryptography 3.2 is vulnerable to Bleichenbacher timing attacks in the RSA decryption API, via timed processing of valid PKCS#1 v1.5
CVE-2020-25659 · Severity: low · CVSS 3.1 · Published 2021-01-11
Technologies: cryptography (PyPI). Vendors: PyPI.
Related threats
- pyca cryptography improper certificate validation in Name Constraints
- Pyca Cryptography exponential path-building in X.509 verification
- pyca cryptography Bleichenbacher oracle in PKCS#7 decryption
- PYSEC-2026-1284 - Vulnerable OpenSSL included in cryptography wheels
- PYSEC-2026-1283 - Python Cryptography package vulnerable to Bleichenbacher timing oracle attack