NVD

Id
17901  
Name
CVE-2016-1494  
Description
The verify function in the RSA package for Python (Python-RSA) before 3.3 allows attackers to spoof signatures with a small public exponent via crafted signature padding, aka a BERserk attack.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2016-01-13  
Modified Date
2016-12-19  
Seq
2016-1494  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
97968 17901 CVE-2016-1494 FEDORA-2016-70edfbbcef  View
97969 17901 CVE-2016-1494 FEDORA-2016-c845706426  View
97970 17901 CVE-2016-1494 openSUSE-SU-2016:0108  View
97971 17901 CVE-2016-1494 [oss-security] 20160105 CVE Request: python-rsa signature forgery  View
97972 17901 CVE-2016-1494 [oss-security] 20160104 Re: CVE Request: python-rsa signature forgery  View
97973 17901 CVE-2016-1494 79829  View
97974 17901 CVE-2016-1494 https://bitbucket.org/sybren/python-rsa/pull-requests/14/security-fix-bb06-attack-in-verify-by/diff  View
97975 17901 CVE-2016-1494 https://blog.filippo.io/bleichenbacher-06-signature-forgery-in-python-rsa/  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
279 JVNDB-2016-001052 Python 用 RSA パッケージの verify 関数における過度に小さな公開指数を持つ署名を偽造される脆弱性 Python (Python-RSA) 用 RSA パッケージの verify 関数には、過度に小さな公開指数を持つ署名を偽造される脆弱性が存在します。 CVE-2016-1494 88000 CVE-2016-1494 17901 5 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-001052.html 2016-01-13 2016-01-18 View