CVE-2020-25657
A flaw was found in all released versions of m2crypto, where they are vulnerable to...
A flaw was found in all released versions of m2crypto, where they are vulnerable to Bleichenbacher timing attacks in the RSA decryption API via the timed processing of valid PKCS#1 v1.5 Ciphertext. The highest threat from this vulnerability is to confidentiality.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- None
- Availability
- None
Exploit likelihood
What each source reports
NVD Score used
A flaw was found in all released versions of m2crypto, where they are vulnerable to Bleichenbacher timing attacks in the RSA decryption API via the timed processing of valid PKCS#1 v1.5 Ciphertext. The highest threat from this vulnerability is to confidentiality.
- Record
CVE-2020-25657- CVSS 3.1
- 5.9 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N - CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:P/I:N/A:N - Weakness
- CWE-385
- Updated
- 2026-11-02
CVE List No score
A flaw was found in all released versions of m2crypto, where they are vulnerable to Bleichenbacher timing attacks in the RSA decryption API via the timed processing of valid PKCS#1 v1.5 Ciphertext. The highest threat from this vulnerability is to confidentiality.
- Record
CVE-2020-25657- Weakness
- CWE-385
- Updated
- 2026-11-02
EUVDEUVD-2020-18321 No score
A flaw was found in all released versions of m2crypto, where they are vulnerable to Bleichenbacher timing attacks in the RSA decryption API via the timed processing of valid PKCS#1 v1.5 Ciphertext. The highest threat from this vulnerability is to confidentiality.
- Record
EUVD-2020-18321- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-2j9v-8g47-mxh2
A flaw was found in all released versions of m2crypto, where they are vulnerable to...
A flaw was found in all released versions of m2crypto, where they are vulnerable to Bleichenbacher timing attacks in the RSA decryption API via the timed processing of valid PKCS#1 v1.5 Ciphertext. The highest threat from this vulnerability is to confidentiality.
- Record
GHSA-2j9v-8g47-mxh2- CVSS 3.1
- 5.9 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-203, CWE-385
- Updated
- 2026-11-02
OSVAZL-10076
CVE-2020-25657 affecting package m2crypto for versions less than 0.38.0-3
A flaw was found in all released versions of m2crypto, where they are vulnerable to Bleichenbacher timing attacks in the RSA decryption API via the timed processing of valid PKCS#1 v1.5 Ciphertext. The highest threat from this vulnerability is to confidentiality.
- Record
AZL-10076- CVSS 3.1
- 5.9 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSVAZL-34969
CVE-2020-25657 affecting package m2crypto for versions less than 0.38.0-3
A flaw was found in all released versions of m2crypto, where they are vulnerable to Bleichenbacher timing attacks in the RSA decryption API via the timed processing of valid PKCS#1 v1.5 Ciphertext. The highest threat from this vulnerability is to confidentiality.
- Record
AZL-34969- CVSS 3.1
- 5.9 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-05
Show 15 moreShow less
OSV
A flaw was found in all released versions of m2crypto, where they are vulnerable to Bleichenbacher timing attacks in the RSA decryption API via the timed processing of valid PKCS#1 v1.5 Ciphertext. The highest threat from this vulnerability is to confidentiality.
- Record
CVE-2020-25657- CVSS 3.1
- 5.9 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSVDEBIAN-CVE-2020-25657
A flaw was found in all released versions of m2crypto, where they are vulnerable to Bleichenbacher timing attacks in the RSA decryption API via the timed processing of valid PKCS#1 v1.5 Ciphertext. The highest threat from this vulnerability is to confidentiality.
- Record
DEBIAN-CVE-2020-25657- CVSS 3.1
- 5.9 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSVOESA-2022-1852
m2crypto security update
M2Crypto is a crypto and SSL toolkit for Python. It allows you to call OpenSSL functions from Python2 scripts.
Security Fix(es):
A flaw was found in all released versions of m2crypto, where they are vulnerable to Bleichenbacher timing attacks in the RSA decryption API via the timed processing of valid PKCS#1 v1.5 Ciphertext. The highest threat from this vulnerability is to confidentiality.(CVE-2020-25657)
- Record
OESA-2022-1852- CVSS 3.1
- 5.9 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSVRHSA-2021:1169
Red Hat Security Advisory: RHV Manager (ovirt-engine) 4.4.z [ovirt-4.4.5] security, bug fix, enhancement
- Record
RHSA-2021:1169- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2020-25657
A flaw was found in all released versions of m2crypto, where they are vulnerable to Bleichenbacher timing attacks in the RSA decryption API via the timed processing of valid PKCS#1 v1.5 Ciphertext. The highest threat from this vulnerability is to confidentiality.
- Record
UBUNTU-CVE-2020-25657- CVSS 3.1
- 5.9 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSVMGASA-2022-0274 No score
Updated python-m2crypto packages fix security vulnerability
Bleichenbacher timing attacks in the RSA decryption API (CVE-2020-25657)
- Record
MGASA-2022-0274- Updated
- 2026-11-02
OSVopenSUSE-SU-2022:2562-1 No score
Security update for python-M2Crypto
This update for python-M2Crypto fixes the following issues:
- CVE-2020-25657: Fixed Bleichenbacher timing attacks in the RSA decryption API (bsc#1178829).
- Record
openSUSE-SU-2022:2562-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:12192-1 No score
python-M2Crypto-doc-0.38.0-3.1 on GA media
These are all security issues fixed in the python-M2Crypto-doc-0.38.0-3.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:12192-1- Updated
- 2026-11-02
OSVSUSE-FU-2024:1448-1 No score
Feature update for python-M2Crypto
This update for python-M2Crypto fixes the following issue:
- Build for modern python stack
- Adds python311-M2Crypto
- Record
SUSE-FU-2024:1448-1- Updated
- 2026-11-02
OSVSUSE-RU-2025:0796-1 No score
Recommended update for python3-M2Crypto
This update for python3-M2Crypto fixes the following issues:
- Fix spelling of BSD-2-Clause license.
- Update to 0.44.0:
- The real license is BSD 2-Clause, not MIT.
- Remove python-M2Crypto.keyring, because PyPI broke GPG support
- Build for modern python stack on SLE/Leap
- require setuptools
- Make tests running again.
- Remove unnecessary fdupes call
- Add python-typing as a dependency
- SLE12 requires swig3 for a successful build, too
- Record
SUSE-RU-2025:0796-1- Updated
- 2026-11-02
OSVSUSE-RU-2025:0800-1 No score
Recommended update for python3-M2Crypto
This update for python3-M2Crypto fixes the following issues:
- Fix spelling of BSD-2-Clause license.
- Update to 0.44.0:
- The real license is BSD 2-Clause, not MIT.
- Remove python-M2Crypto.keyring, because PyPI broke GPG support
- Build for modern python stack on SLE/Leap
- require setuptools
- Make tests running again.
- Remove unnecessary fdupes call
- Add python-typing as a dependency
- SLE12 requires swig3 for a successful build, too
- Record
SUSE-RU-2025:0800-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:2527-1 No score
Security update for python-M2Crypto
This update for python-M2Crypto fixes the following issues:
- CVE-2020-25657: Fixed Bleichenbacher timing attacks in the RSA decryption API (bsc#1178829).
- Record
SUSE-SU-2022:2527-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:2532-1 No score
Security update for python-M2Crypto
This update for python-M2Crypto fixes the following issues:
- CVE-2020-25657: Fixed Bleichenbacher timing attacks in the RSA decryption API (bsc#1178829).
- Record
SUSE-SU-2022:2532-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:2562-1 No score
Security update for python-M2Crypto
This update for python-M2Crypto fixes the following issues:
- CVE-2020-25657: Fixed Bleichenbacher timing attacks in the RSA decryption API (bsc#1178829).
- Record
SUSE-SU-2022:2562-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:2691-1 No score
Security update for python-M2Crypto
This update for python-M2Crypto fixes the following issues:
- CVE-2020-25657: Fixed Bleichenbacher timing attacks in the RSA decryption API (bsc#1178829).
- Record
SUSE-SU-2022:2691-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
m2cryptoAzure Linux:2 |
before 0.38.0-3 | 0.38.0-3 |
m2cryptoAzure Linux:3 |
before 0.38.0-3 | 0.38.0-3 |
m2cryptoDebian:12 |
before 0.38.0-4 | 0.38.0-4 |
m2cryptoDebian:13 |
before 0.38.0-4 | 0.38.0-4 |
python-m2cryptoMageia:8 |
before 0.38.0-4.mga8 | 0.38.0-4.mga8 |
m2cryptoopenEuler:20.03-LTS-SP1 |
before 0.30.1-5.oe1 | 0.30.1-5.oe1 |
m2cryptoopenEuler:20.03-LTS-SP3 |
before 0.30.1-5.oe1 | 0.30.1-5.oe1 |
m2cryptoopenEuler:22.03-LTS |
before 0.38.0-2.oe2203 | 0.38.0-2.oe2203 |
ovirt-web-uiRed Hat:rhev_manager:4.4:el8 From an advisory covering 4 CVEs |
before 0:1.6.7-1.el8ev | 0:1.6.7-1.el8ev |
ovirt-engineRed Hat:rhev_manager:4.4:el8 From an advisory covering 4 CVEs |
before 0:4.4.5.9-0.1.el8ev | 0:4.4.5.9-0.1.el8ev |
Show 88 moreShow less
| Package | Affected | Fixed |
|---|---|---|
ovirt-engine-backendRed Hat:rhev_manager:4.4:el8 From an advisory covering 4 CVEs |
before 0:4.4.5.9-0.1.el8ev | 0:4.4.5.9-0.1.el8ev |
ovirt-engine-dbscriptsRed Hat:rhev_manager:4.4:el8 From an advisory covering 4 CVEs |
before 0:4.4.5.9-0.1.el8ev | 0:4.4.5.9-0.1.el8ev |
ovirt-engine-health-check-bundlerRed Hat:rhev_manager:4.4:el8 From an advisory covering 4 CVEs |
before 0:4.4.5.9-0.1.el8ev | 0:4.4.5.9-0.1.el8ev |
ovirt-engine-restapiRed Hat:rhev_manager:4.4:el8 From an advisory covering 4 CVEs |
before 0:4.4.5.9-0.1.el8ev | 0:4.4.5.9-0.1.el8ev |
ovirt-engine-setupRed Hat:rhev_manager:4.4:el8 From an advisory covering 4 CVEs |
before 0:4.4.5.9-0.1.el8ev | 0:4.4.5.9-0.1.el8ev |
ovirt-engine-setup-baseRed Hat:rhev_manager:4.4:el8 From an advisory covering 4 CVEs |
before 0:4.4.5.9-0.1.el8ev | 0:4.4.5.9-0.1.el8ev |
ovirt-engine-setup-plugin-cinderlibRed Hat:rhev_manager:4.4:el8 From an advisory covering 4 CVEs |
before 0:4.4.5.9-0.1.el8ev | 0:4.4.5.9-0.1.el8ev |
ovirt-engine-setup-plugin-imageioRed Hat:rhev_manager:4.4:el8 From an advisory covering 4 CVEs |
before 0:4.4.5.9-0.1.el8ev | 0:4.4.5.9-0.1.el8ev |
ovirt-engine-setup-plugin-ovirt-engineRed Hat:rhev_manager:4.4:el8 From an advisory covering 4 CVEs |
before 0:4.4.5.9-0.1.el8ev | 0:4.4.5.9-0.1.el8ev |
ovirt-engine-setup-plugin-ovirt-engine-commonRed Hat:rhev_manager:4.4:el8 From an advisory covering 4 CVEs |
before 0:4.4.5.9-0.1.el8ev | 0:4.4.5.9-0.1.el8ev |
ovirt-engine-setup-plugin-vmconsole-proxy-helperRed Hat:rhev_manager:4.4:el8 From an advisory covering 4 CVEs |
before 0:4.4.5.9-0.1.el8ev | 0:4.4.5.9-0.1.el8ev |
ovirt-engine-setup-plugin-websocket-proxyRed Hat:rhev_manager:4.4:el8 From an advisory covering 4 CVEs |
before 0:4.4.5.9-0.1.el8ev | 0:4.4.5.9-0.1.el8ev |
ovirt-engine-toolsRed Hat:rhev_manager:4.4:el8 From an advisory covering 4 CVEs |
before 0:4.4.5.9-0.1.el8ev | 0:4.4.5.9-0.1.el8ev |
ovirt-engine-tools-backupRed Hat:rhev_manager:4.4:el8 From an advisory covering 4 CVEs |
before 0:4.4.5.9-0.1.el8ev | 0:4.4.5.9-0.1.el8ev |
ovirt-engine-vmconsole-proxy-helperRed Hat:rhev_manager:4.4:el8 From an advisory covering 4 CVEs |
before 0:4.4.5.9-0.1.el8ev | 0:4.4.5.9-0.1.el8ev |
ovirt-engine-webadmin-portalRed Hat:rhev_manager:4.4:el8 From an advisory covering 4 CVEs |
before 0:4.4.5.9-0.1.el8ev | 0:4.4.5.9-0.1.el8ev |
ovirt-engine-websocket-proxyRed Hat:rhev_manager:4.4:el8 From an advisory covering 4 CVEs |
before 0:4.4.5.9-0.1.el8ev | 0:4.4.5.9-0.1.el8ev |
python3-ovirt-engine-libRed Hat:rhev_manager:4.4:el8 From an advisory covering 4 CVEs |
before 0:4.4.5.9-0.1.el8ev | 0:4.4.5.9-0.1.el8ev |
rhvmRed Hat:rhev_manager:4.4:el8 From an advisory covering 4 CVEs |
before 0:4.4.5.9-0.1.el8ev | 0:4.4.5.9-0.1.el8ev |
python-M2CryptoSUSE:Linux Enterprise Module for Python 3 15 SP5 |
before 0.40.0-150400.3.9.1 | 0.40.0-150400.3.9.1 |
python-M2CryptoSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS |
before 0.40.0-150400.3.9.1 | 0.40.0-150400.3.9.1 |
python-M2CryptoSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS |
before 0.40.0-150400.3.9.1 | 0.40.0-150400.3.9.1 |
python-M2CryptoSUSE:Linux Enterprise Server 15 SP4-LTSS |
before 0.40.0-150400.3.9.1 | 0.40.0-150400.3.9.1 |
python-M2CryptoSUSE:Linux Enterprise Server for SAP Applications 15 SP4 |
before 0.40.0-150400.3.9.1 | 0.40.0-150400.3.9.1 |
python-M2CryptoopenSUSE:Leap 15.5 |
before 0.40.0-150400.3.9.1 | 0.40.0-150400.3.9.1 |
python3-M2CryptoSUSE:Linux Enterprise Module for Basesystem 15 SP6 |
before 0.44.0-150600.19.3.1 | 0.44.0-150600.19.3.1 |
python3-M2CryptoopenSUSE:Leap 15.6 |
before 0.44.0-150600.19.3.1 | 0.44.0-150600.19.3.1 |
python3-M2CryptoSUSE:Linux Enterprise Micro 5.3 |
before 0.44.0-150400.13.1 | 0.44.0-150400.13.1 |
python3-M2CryptoSUSE:Linux Enterprise Micro 5.4 |
before 0.44.0-150400.13.1 | 0.44.0-150400.13.1 |
python3-M2CryptoSUSE:Linux Enterprise Micro 5.5 |
before 0.44.0-150400.13.1 | 0.44.0-150400.13.1 |
python3-M2CryptoSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS |
before 0.44.0-150400.13.1 | 0.44.0-150400.13.1 |
python3-M2CryptoSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS |
before 0.44.0-150400.13.1 | 0.44.0-150400.13.1 |
python3-M2CryptoSUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS |
before 0.44.0-150400.13.1 | 0.44.0-150400.13.1 |
python3-M2CryptoSUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS |
before 0.44.0-150400.13.1 | 0.44.0-150400.13.1 |
python3-M2CryptoSUSE:Linux Enterprise Server 15 SP4-LTSS |
before 0.44.0-150400.13.1 | 0.44.0-150400.13.1 |
python3-M2CryptoSUSE:Linux Enterprise Server 15 SP5-LTSS |
before 0.44.0-150400.13.1 | 0.44.0-150400.13.1 |
python3-M2CryptoSUSE:Linux Enterprise Server for SAP Applications 15 SP4 |
before 0.44.0-150400.13.1 | 0.44.0-150400.13.1 |
python3-M2CryptoSUSE:Linux Enterprise Server for SAP Applications 15 SP5 |
before 0.44.0-150400.13.1 | 0.44.0-150400.13.1 |
python3-M2CryptoSUSE:Manager Proxy 4.3 |
before 0.44.0-150400.13.1 | 0.44.0-150400.13.1 |
python3-M2CryptoSUSE:Manager Server 4.3 |
before 0.44.0-150400.13.1 | 0.44.0-150400.13.1 |
python-M2CryptoSUSE:OpenStack Cloud 9 |
before 0.29.0-23.8.1 | 0.29.0-23.8.1 |
python-M2CryptoSUSE:OpenStack Cloud Crowbar 9 |
before 0.29.0-23.8.1 | 0.29.0-23.8.1 |
python-M2CryptoSUSE:Linux Enterprise Module for Public Cloud 12 |
before 0.29.0-23.8.1 | 0.29.0-23.8.1 |
python-M2CryptoSUSE:Linux Enterprise Server for SAP Applications 12 SP4 |
before 0.29.0-23.8.1 | 0.29.0-23.8.1 |
python-M2CryptoSUSE:Linux Enterprise Server 12 SP2-BCL |
before 0.29.0-23.8.1 | 0.29.0-23.8.1 |
python-M2CryptoSUSE:Linux Enterprise Server 12 SP3-BCL |
before 0.29.0-23.8.1 | 0.29.0-23.8.1 |
python-M2CryptoSUSE:Linux Enterprise Server 12 SP4-LTSS |
before 0.29.0-23.8.1 | 0.29.0-23.8.1 |
python-M2CryptoSUSE:Linux Enterprise Server 12 SP5 |
before 0.29.0-23.8.1 | 0.29.0-23.8.1 |
python-M2CryptoSUSE:Linux Enterprise Server for SAP Applications 12 SP5 |
before 0.29.0-23.8.1 | 0.29.0-23.8.1 |
python-M2CryptoSUSE:Linux Enterprise Module for Basesystem 15 SP4 |
before 0.38.0-150400.3.3.1 | 0.38.0-150400.3.3.1 |
python-M2CryptoopenSUSE:Leap 15.4 |
before 0.38.0-150400.3.3.1 | 0.38.0-150400.3.3.1 |
python-M2CryptoSUSE:Linux Enterprise Module for Basesystem 15 SP3 |
before 0.35.2-150000.3.14.1 | 0.35.2-150000.3.14.1 |
python-M2CryptoSUSE:Linux Enterprise Module for Public Cloud 15 |
before 0.35.2-150000.3.14.1 | 0.35.2-150000.3.14.1 |
python-M2CryptoSUSE:Linux Enterprise Module for Python 2 15 SP3 |
before 0.35.2-150000.3.14.1 | 0.35.2-150000.3.14.1 |
python-M2CryptoSUSE:Linux Enterprise High Performance Computing 15-ESPOS |
before 0.35.2-150000.3.14.1 | 0.35.2-150000.3.14.1 |
python-M2CryptoSUSE:Linux Enterprise High Performance Computing 15-LTSS |
before 0.35.2-150000.3.14.1 | 0.35.2-150000.3.14.1 |
python-M2CryptoSUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS |
before 0.35.2-150000.3.14.1 | 0.35.2-150000.3.14.1 |
python-M2CryptoSUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS |
before 0.35.2-150000.3.14.1 | 0.35.2-150000.3.14.1 |
python-M2CryptoSUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS |
before 0.35.2-150000.3.14.1 | 0.35.2-150000.3.14.1 |
python-M2CryptoSUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS |
before 0.35.2-150000.3.14.1 | 0.35.2-150000.3.14.1 |
python-M2CryptoSUSE:Linux Enterprise Server 15-LTSS |
before 0.35.2-150000.3.14.1 | 0.35.2-150000.3.14.1 |
python-M2CryptoSUSE:Linux Enterprise Server 15 SP1-BCL |
before 0.35.2-150000.3.14.1 | 0.35.2-150000.3.14.1 |
python-M2CryptoSUSE:Linux Enterprise Server 15 SP1-LTSS |
before 0.35.2-150000.3.14.1 | 0.35.2-150000.3.14.1 |
python-M2CryptoSUSE:Linux Enterprise Server 15 SP2-BCL |
before 0.35.2-150000.3.14.1 | 0.35.2-150000.3.14.1 |
python-M2CryptoSUSE:Linux Enterprise Server 15 SP2-LTSS |
before 0.35.2-150000.3.14.1 | 0.35.2-150000.3.14.1 |
python-M2CryptoSUSE:Linux Enterprise Server for SAP Applications 15 |
before 0.35.2-150000.3.14.1 | 0.35.2-150000.3.14.1 |
python-M2CryptoSUSE:Linux Enterprise Server for SAP Applications 15 SP1 |
before 0.35.2-150000.3.14.1 | 0.35.2-150000.3.14.1 |
python-M2CryptoSUSE:Linux Enterprise Server for SAP Applications 15 SP2 |
before 0.35.2-150000.3.14.1 | 0.35.2-150000.3.14.1 |
python-M2CryptoSUSE:Manager Proxy 4.1 |
before 0.35.2-150000.3.14.1 | 0.35.2-150000.3.14.1 |
python-M2CryptoSUSE:Manager Retail Branch Server 4.1 |
before 0.35.2-150000.3.14.1 | 0.35.2-150000.3.14.1 |
python-M2CryptoSUSE:Manager Server 4.1 |
before 0.35.2-150000.3.14.1 | 0.35.2-150000.3.14.1 |
python-M2CryptoSUSE:Linux Enterprise Micro 5.1 |
before 0.35.2-150000.3.14.1 | 0.35.2-150000.3.14.1 |
python-M2CryptoSUSE:Linux Enterprise Micro 5.2 |
before 0.35.2-150000.3.14.1 | 0.35.2-150000.3.14.1 |
python-M2CryptoSUSE:Enterprise Storage 6 |
before 0.35.2-150000.3.14.1 | 0.35.2-150000.3.14.1 |
python-M2CryptoSUSE:Enterprise Storage 7 |
before 0.35.2-150000.3.14.1 | 0.35.2-150000.3.14.1 |
python-M2CryptoopenSUSE:Leap 15.3 |
before 0.35.2-150000.3.14.1 | 0.35.2-150000.3.14.1 |
python-M2CryptoopenSUSE:Leap 15.4 |
before 0.35.2-150000.3.14.1 | 0.35.2-150000.3.14.1 |
python-M2CryptoSUSE:Linux Enterprise Module for Basesystem 15 SP4 |
before 0.38.0-150400.3.6.1 | 0.38.0-150400.3.6.1 |
python-M2CryptoopenSUSE:Leap 15.4 |
before 0.38.0-150400.3.6.1 | 0.38.0-150400.3.6.1 |
m2cryptoUbuntu:14.04:LTS |
All versions, plus listed versions 0.21.1-3ubuntu30.21.1-3ubuntu40.21.1-3ubuntu5 |
None known |
m2cryptoUbuntu:16.04:LTS |
All versions, plus listed versions 0.21.1-3ubuntu50.22.6~rc4-1ubuntu1 |
None known |
m2cryptoUbuntu:18.04:LTS |
All versions, plus listed versions 0.24.0-20.27.0-20.27.0-40.27.0-4build10.27.0-5 |
None known |
m2cryptoUbuntu:20.04:LTS |
All versions, plus listed versions 0.31.0-60.31.0-6build10.31.0-70.31.0-80.31.0-9ubuntu1 |
None known |
m2cryptoUbuntu:22.04:LTS |
All versions, plus listed versions 0.37.1-1ubuntu30.37.1-1ubuntu40.38.0-1ubuntu30.38.0-1ubuntu5 |
None known |
m2cryptoUbuntu:24.04:LTS |
All versions, plus listed versions 0.38.0-4build10.38.0-4.10.40.1-0ubuntu10.40.1-10.40.1-2build10.40.1-2build20.40.1-2ubuntu1 |
None known |
m2cryptoUbuntu:25.10 |
All versions, plus listed versions 0.42.0-2.1build10.42.0-3 |
None known |
m2cryptoUbuntu:26.04:LTS |
All versions, plus listed versions 0.42.0-30.46.2-20.46.2-30.46.2-3build1 |
None known |
python-M2CryptoopenSUSE:Leap Micro 5.2 |
before 0.35.2-150000.3.14.1 | 0.35.2-150000.3.14.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | ||
| facts | OSV | |
| aliases, products | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2020-25657 is a medium vulnerability (CVSS 5.9) in M2crypto Project M2crypto, published January 12, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.76%, the 78th percentile. Fixed in m2crypto 0.38.0-3.
References
bugzilla.redhat.com/show_bug.cgi?id=1889823
nvd.nist.gov/vuln/detail/CVE-2020-25657
access.redhat.com/errata/RHSA-2021:1169
github.com/advisories/GHSA-2j9v-8g47-mxh2
Show 71 moreShow less
security-tracker.debian.org/tracker/CVE-2020-25657
advisories.mageia.org/MGASA-2022-0274.html
bugs.mageia.org/show_bug.cgi?id=30661
lists.suse.com/pipermail/sle-security-updates/2022-July/011631.html
lists.opensuse.org/archives/list/[email protected]/thread/QEML6RS6UMHDYGJ355BS2ARODQ4OYLRW
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1852
security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_1169.json
cve.org/CVERecord?id=CVE-2019-20921
snyk.io/vuln/SNYK-JS-BOOTSTRAPSELECT-570457
suse.com/support/update/announcement/-2024-1448/suse-fu-20241448-1
bugzilla.suse.com/1205042
ubuntu.com/security/CVE-2020-25657