CVE-2020-13757

Priority
Description
Python-RSA before 4.1 ignores leading '\0' bytes during decryption of
ciphertext. This could conceivably have a security-relevant impact, e.g.,
by helping an attacker to infer that an application uses Python-RSA, or if
the length of accepted ciphertext affects application behavior (such as by
causing excessive memory allocation).
Notes
Package
Upstream:released (4.1)
Ubuntu 12.04 ESM (Precise Pangolin):DNE
Ubuntu 14.04 ESM (Trusty Tahr):released (3.1.2-1ubuntu0.1+esm1)
Ubuntu 16.04 LTS (Xenial Xerus):needed
Ubuntu 18.04 LTS (Bionic Beaver):needed
Ubuntu 20.04 LTS (Focal Fossa):needed
Ubuntu 20.10 (Groovy Gorilla):needed
More Information

Updated: 2020-09-09 23:35:17 UTC (commit 81a23a978c4436cd99e1d040e9e73e9146876281)