Skip to content
Fencer Vulns
high 7.5

CVE-2020-25658 json

Timing attacks in python-rsa

published 2020-11-12 5 y ago modified 2026-06-17 4 mo ago also GHSA-xrx6-fmxq-rjj2 , PYSEC-2020-100 , EUVD-2020-0167

cvss
7.5
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
1.7%
EPSS 1.7% chance of exploitation in 30 days, percentile 76%
public exploits
0
none known

Summary

It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decrypt parts of the cipher text encrypted with RSA.

Patch / fix

  • pypi rsa 4.7
  • python-rsa_project python-rsa 4.7
  • ceph ceph storage 4 2:14.2.22-110.el7cp
  • ceph ceph storage 4 2:14.2.22-110.el8cp
  • librbd1 ceph storage 4 2:14.2.22-110.el7cp
  • librbd1 ceph storage 4 2:14.2.22-110.el8cp
  • librgw2 ceph storage 4 2:14.2.22-110.el7cp
  • librgw2 ceph storage 4 2:14.2.22-110.el8cp
  • rbd-nbd ceph storage 4 2:14.2.22-110.el7cp
  • rbd-nbd ceph storage 4 2:14.2.22-110.el8cp

red hat advisories RHSA-2022:1716RHSA-2021:0637RHSA-2020:5634

  • python-rsa SLE Module for Public Cloud 12 3.1.4-12.19.2
  • python-rsa SLE Module for Package Hub 15 SP4, SLE Module for Package Hub 15 SP3, SLE Module for Basesystem 15 SP4 +6 more 3.4.2-150000.3.7.1

suse advisories SUSE-SU-2023:0648-1SUSE-SU-2022:3932-1

  • python-rsa openSUSE Tumbleweed 4.9.1-1.4
  • python-rsa openSUSE Tumbleweed 4.9-3.5
  • python-rsa openSUSE Tumbleweed 4.7.2-1.5

opensuse advisories openSUSE-SU-2026:12041-1openSUSE-SU-2024:14163-1openSUSE-SU-2024:11269-1

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2020-25658 updated cvss 5.9

python-rsa: bleichenbacher timing oracle attack against RSA decryption

  • Red Hat Enterprise Linux 9 python-rsa
    affected: no fix available
  • Red Hat OpenStack Platform 13 (Queens) python2-rsa Red Hat OpenStack Platform 16 (Train) python-rsa, python3-rsa Red Hat Quay 3 quay
    affected: no fix planned “Will not fix”
  • Red Hat Ceph Storage 4.3 MON python-rsa 4.8-1.el8cp, python3-rsa 4.8-1.el8cp
    fixed: vendor fix RHSA-2022:1716
  • Red Hat OpenShift Container Platform 3.11 python-rsa 4.5-3.el7, python2-rsa 4.5-3.el7
    fixed: vendor fix RHSA-2021:0637
  • Red Hat OpenShift Container Platform 4.7 python-rsa 4.7-1.el8, python3-rsa 4.7-1.el8
    fixed: vendor fix RHSA-2020:5634
  • Red Hat Ceph Storage 4.3 MON ceph 14.2.22-110.el7cp, ceph 14.2.22-110.el8cp, librbd1 14.2.22-110.el7cp, librbd1 14.2.22-110.el8cp, librgw2 14.2.22-110.el7cp, librgw2 14.2.22-110.el8cp, +38 more Red Hat Ceph Storage 4.3 OSD ceph 14.2.22-110.el7cp, ceph 14.2.22-110.el8cp, librbd1 14.2.22-110.el7cp, librbd1 14.2.22-110.el8cp, librgw2 14.2.22-110.el7cp, librgw2 14.2.22-110.el8cp, +26 more Red Hat Ceph Storage 4.3 Tools libtcmu 1.5.2-5.el7cp, libtcmu 1.5.2-5.el8cp, ceph 14.2.22-110.el7cp, ceph 14.2.22-110.el8cp, ceph-iscsi 3.4-5.el7cp, ceph-iscsi 3.4-5.el8cp, +60 more Red Hat OpenShift Container Platform 3.11 haproxy 1.8.28-1.el7, haproxy18 1.8.28-1.el7, jenkins 2.263.3.1612433584-1.el7, jenkins-2-plugins 3.11.1612862361-1.el7, prometheus 3.11.394-1.git.5026.2c9627f.el7, atomic-openshift 3.11.394-1.git.0.e03a88e.el7, +38 more Red Hat OpenShift Container Platform 4.7 jq 1.6-2.el7, jq 1.6-2.el8, clevis 15-1.el8, faq 0.0.6-5.el8, bootupd 0.2.5-2.el8, ostree 2020.7-1.el8, +266 more
    not affected: vulnerable code not present

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

cisa ICSA-24-102-04 updated cvss 7.5

Siemens RUGGEDCOM APE1808

  • Siemens RUGGEDCOM APE1808
    affected: vendor fix

Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf

Exploit prediction

1.65% chance of exploitation in the next 30 days, higher than 76% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

  • github.com https://github.com/sybrenstuvel/python-rsa/issues/165 referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by version score vector
CNA 3.1 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
NVD 3.1 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
NVD 2.0 4.3 AV:N/AC:M/Au:N/C:P/I:N/A:N
GitHub 3.1 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected packages

ecosystem package affected fixed in
pypi rsa
>=2.1, <4.7
4.7

Affected products

  • Sybren A. Stüvel python-rsa

Classification

Weakness
  • CWE-385 Covert Timing Channel
  • CWE-327 Use of a Broken or Risky Cryptographic Algorithm

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.