CVEs-PoC/2020/CVE-2020-25659.md

CVE-2020-25659

Description

python-cryptography 3.2 is vulnerable to Bleichenbacher timing attacks in the RSA decryption API, via timed processing of valid PKCS#1 v1.5 ciphertext.

POC

Reference

• https://www.oracle.com/security-alerts/cpuapr2022.html
• https://www.oracle.com/security-alerts/cpujul2022.html

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/AdiRashkes/python-tda-bug-hunt-2
• https://github.com/alexcowperthwaite/PasskeyScanner
• https://github.com/indece-official/clair-client