CVE-2023-50782: Python-cryptography: bleichenbacher timing oracle attack against rsa decryption - incomplete fix for cve-2020-25659
A flaw was found in the python-cryptography package. This issue may allow a remote attacker to decrypt captured messages in TLS servers that use RSA key exchanges, which may lead to exposure of confidential or sensitive data.
Other sources
Description: The fix for CVE-2020-25659 is not addressing the leakage in the RSA decryption. Because of the API design, the fix is generally not believed to be possible to be fully addressed. The issue can be mitigated by using a cryptographic backed that implements implicit rejection (Marvin workaround). Only applications that use RSA decryption with PKCS#1 v1.5 padding are affected.
Implicit rejection in RHEL has shipped in 9.3.0. Will ship in 9.2.eus, 8.6.eus, 8.8.eus, and 8.9.z. No other releases are planned
References: https://github.com/pyca/cryptography/issues/9785 https://people.redhat.com/~hkario/marvin/ https://github.com/openssl/openssl/pull/13817
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-50782?
CVE-2023-50782 is considered a critical vulnerability due to the potential exposure of confidential data.
How do I fix CVE-2023-50782?
To fix CVE-2023-50782, upgrade the python-cryptography package to version 42.0.0 or higher.
Which systems are affected by CVE-2023-50782?
CVE-2023-50782 affects versions of the python-cryptography package below 42.0.0.
Can CVE-2023-50782 lead to data breaches?
Yes, CVE-2023-50782 could allow remote attackers to decrypt messages leading to potential data breaches.
What is the nature of the vulnerability in CVE-2023-50782?
The vulnerability in CVE-2023-50782 arises from inadequate protection of RSA key exchanges in TLS servers.