Insecure encryption algorithm In rsa
Description
Python-RSA decryption of ciphertext leads to DoS Python-RSA before 4.1 ignores leading '\0' bytes during decryption of ciphertext. This could conceivably have a security-relevant impact, e.g., by helping an attacker to infer that an application uses Python-RSA, or if the length of accepted ciphertext affects application behavior (such as by causing excessive memory allocation).
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component | Affected version | Patched versions |
|---|---|---|---|
 pypi | 4.1 | ||
 debian 12 | 4.7.2-1 | ||
debian 11 | - | ||
debian 14 | 4.7.2-1 | ||
debian 13 | 4.7.2-1 |
Aliases
1. 2. 3. 4. 5. 6.
References
1. 2. 3. 4. 5. 6.