CVE-2020-13757

Python-RSA before 4.1 ignores leading '\0' bytes during decryption of ciphertext

published June 1, 2020

CVSS
—
EPSS
1%
Percentile
72.9
In the wild
Unconfirmed
What it is

Python-RSA before 4.1 ignores leading '\0' bytes during decryption of ciphertext. This could conceivably have a security-relevant impact, e.g., by helping an attacker to infer that an application uses Python-RSA, or if the length of accepted ciphertext affects application behavior (such as by causing excessive memory allocation).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01432 · 72.9th percentile
Published
2020-06-01T18:17Z
EPSS history
Timeline
  • 01 JUN 18:17Z
    Python-RSA before 4.1 ignores leading '\0' bytes during decryption of ciphertext
    cvelistv5