perl-Crypt-OpenSSL-RSA vulnerabilities

CVEs whose affected-version data names the perl-Crypt-OpenSSL-RSA package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2024-2467Medium· 5.9

2y ago

Perl-crypt-openssl-rsa: side-channel attack in pkcs#1 v1.5 padding mode (marvin attack)

A timing-based side-channel flaw exists in the perl-Crypt-OpenSSL-RSA package, which could be sufficient to recover plaintext across a network in a Bleichenbacher-style attack. To achieve successful decryption, an attacker would have to …

▾ SunlitRed Hat · perl-Crypt-OpenSSL-RSAEPSS 0.52%via CVEORG