vulnwire
5.3med

CVE-2016-1494

Python RSA allows attackers to spoof signatures

Also known as GHSA-8rjr-6qq5-pj9p, PYSEC-2016-10

Published 10 y ago · modified 4 mo ago · JSON

CVSS
5.3
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
7.1%
percentile 94%
Public exploits
0
none known

The verify function in the RSA package for Python (Python-RSA) before 3.3 allows attackers to spoof signatures with a small public exponent via crafted signature padding, aka a BERserk attack.

Exploit prediction (EPSS)

7.05% probability of exploitation in the next 30 days, higher than 94% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD3.05.3CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
NVD2.05.0AV:N/AC:L/Au:N/C:N/I:P/A:N
GitHub3.05.3CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Affected packages

EcosystemPackageAffectedFixed in
pypirsa
<3.3
3.3

Classification

Weakness
  • CWE-20 Improper Input Validation
  • CWE-347 Improper Verification of Cryptographic Signature

References

  • openwall.com /lists/oss-security/2016/01/05/3 · mailing-list, x_refsource_MLIST, x_transferred
  • securityfocus.com /bid/79829 · vdb-entry, x_refsource_BID, x_transferred
  • blog.filippo.io /bleichenbacher-06-signature-forgery-in-python-rsa/ · x_refsource_MISC, x_transferred
  • openwall.com /lists/oss-security/2016/01/05/1 · mailing-list, x_refsource_MLIST, x_transferred
  • lists.fedoraproject.org /pipermail/package-announce/2016-January/175897.html · vendor-advisory, x_refsource_FEDORA, x_transferred
  • lists.opensuse.org /opensuse-updates/2016-01/msg00032.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • bitbucket.org /sybren/python-rsa/pull-requests/14/security-fix-bb06-attack-in-verify-by/diff · x_refsource_CONFIRM, x_transferred
  • lists.fedoraproject.org /pipermail/package-announce/2016-January/175942.html · vendor-advisory, x_refsource_FEDORA, x_transferred
  • nvd.nist.gov /vuln/detail/CVE-2016-1494 · advisory
  • github.com /sybrenstuvel/python-rsa/commit/ab5d21c3b554f926d51ff3ad9c794bcf32e95b3c · web
  • blog.filippo.io /bleichenbacher-06-signature-forgery-in-python-rsa · web
  • github.com /pypa/advisory-database/tree/main/vulns/rsa/PYSEC-2016-10.yaml · web
  • github.com /sybrenstuvel/python-rsa · package
  • web.archive.org /web/20210123020914/http://www.securityfocus.com/bid/79829 · web
  • github.com /advisories/GHSA-8rjr-6qq5-pj9p · advisory

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.