{"id":"CVE-2020-25657","aliases":["AZL-10076","AZL-34969","DEBIAN-CVE-2020-25657","EUVD-2020-18321","GHSA-2j9v-8g47-mxh2","MGASA-2022-0274","OESA-2022-1852","RHSA-2021:1169","SUSE-FU-2024:1448-1","SUSE-RU-2025:0796-1","SUSE-RU-2025:0800-1","SUSE-SU-2022:2527-1","SUSE-SU-2022:2532-1","SUSE-SU-2022:2562-1","SUSE-SU-2022:2691-1","UBUNTU-CVE-2020-25657","openSUSE-SU-2022:2562-1","openSUSE-SU-2024:12192-1"],"status":"published","title":"A flaw was found in all released versions of m2crypto, where they are vulnerable to...","description":"A flaw was found in all released versions of m2crypto, where they are vulnerable to Bleichenbacher timing attacks in the RSA decryption API via the timed processing of valid PKCS#1 v1.5 Ciphertext. The highest threat from this vulnerability is to confidentiality.","severity":{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01763,"percentile":0.78192,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-203","CWE-385"],"published":"2021-01-12T14:33:02Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"Azure Linux:2","package":"m2crypto","fixed_in":["0.38.0-3"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"m2crypto","fixed_in":["0.38.0-3"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"m2crypto","fixed_in":["0.38.0-4"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"m2crypto","fixed_in":["0.38.0-4"],"sources":["osv"]},{"ecosystem":"Mageia:8","package":"python-m2crypto","fixed_in":["0.38.0-4.mga8"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"m2crypto","fixed_in":["0.30.1-5.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"m2crypto","fixed_in":["0.30.1-5.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"m2crypto","fixed_in":["0.38.0-2.oe2203"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Python 3 15 SP5","package":"python-M2Crypto","fixed_in":["0.40.0-150400.3.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"python-M2Crypto","fixed_in":["0.40.0-150400.3.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"python-M2Crypto","fixed_in":["0.40.0-150400.3.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"python-M2Crypto","fixed_in":["0.40.0-150400.3.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"python-M2Crypto","fixed_in":["0.40.0-150400.3.9.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"python-M2Crypto","fixed_in":["0.40.0-150400.3.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"python3-M2Crypto","fixed_in":["0.44.0-150600.19.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"python3-M2Crypto","fixed_in":["0.44.0-150600.19.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"python3-M2Crypto","fixed_in":["0.44.0-150400.13.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"python3-M2Crypto","fixed_in":["0.44.0-150400.13.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"python3-M2Crypto","fixed_in":["0.44.0-150400.13.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"python3-M2Crypto","fixed_in":["0.44.0-150400.13.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"python3-M2Crypto","fixed_in":["0.44.0-150400.13.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"python3-M2Crypto","fixed_in":["0.44.0-150400.13.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"python3-M2Crypto","fixed_in":["0.44.0-150400.13.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"python3-M2Crypto","fixed_in":["0.44.0-150400.13.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"python3-M2Crypto","fixed_in":["0.44.0-150400.13.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"python3-M2Crypto","fixed_in":["0.44.0-150400.13.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"python3-M2Crypto","fixed_in":["0.44.0-150400.13.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.3","package":"python3-M2Crypto","fixed_in":["0.44.0-150400.13.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.3","package":"python3-M2Crypto","fixed_in":["0.44.0-150400.13.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 9","package":"python-M2Crypto","fixed_in":["0.29.0-23.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"python-M2Crypto","fixed_in":["0.29.0-23.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 12","package":"python-M2Crypto","fixed_in":["0.29.0-23.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"python-M2Crypto","fixed_in":["0.29.0-23.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"python-M2Crypto","fixed_in":["0.29.0-23.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"python-M2Crypto","fixed_in":["0.29.0-23.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"python-M2Crypto","fixed_in":["0.29.0-23.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"python-M2Crypto","fixed_in":["0.29.0-23.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"python-M2Crypto","fixed_in":["0.29.0-23.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"python-M2Crypto","fixed_in":["0.38.0-150400.3.3.1","0.38.0-150400.3.6.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"python-M2Crypto","fixed_in":["0.38.0-150400.3.3.1","0.35.2-150000.3.14.1","0.38.0-150400.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"python-M2Crypto","fixed_in":["0.35.2-150000.3.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15","package":"python-M2Crypto","fixed_in":["0.35.2-150000.3.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Python 2 15 SP3","package":"python-M2Crypto","fixed_in":["0.35.2-150000.3.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"python-M2Crypto","fixed_in":["0.35.2-150000.3.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"python-M2Crypto","fixed_in":["0.35.2-150000.3.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"python-M2Crypto","fixed_in":["0.35.2-150000.3.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"python-M2Crypto","fixed_in":["0.35.2-150000.3.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"python-M2Crypto","fixed_in":["0.35.2-150000.3.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"python-M2Crypto","fixed_in":["0.35.2-150000.3.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"python-M2Crypto","fixed_in":["0.35.2-150000.3.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"python-M2Crypto","fixed_in":["0.35.2-150000.3.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"python-M2Crypto","fixed_in":["0.35.2-150000.3.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"python-M2Crypto","fixed_in":["0.35.2-150000.3.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"python-M2Crypto","fixed_in":["0.35.2-150000.3.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"python-M2Crypto","fixed_in":["0.35.2-150000.3.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"python-M2Crypto","fixed_in":["0.35.2-150000.3.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"python-M2Crypto","fixed_in":["0.35.2-150000.3.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.1","package":"python-M2Crypto","fixed_in":["0.35.2-150000.3.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"python-M2Crypto","fixed_in":["0.35.2-150000.3.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.1","package":"python-M2Crypto","fixed_in":["0.35.2-150000.3.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"python-M2Crypto","fixed_in":["0.35.2-150000.3.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"python-M2Crypto","fixed_in":["0.35.2-150000.3.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 6","package":"python-M2Crypto","fixed_in":["0.35.2-150000.3.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7","package":"python-M2Crypto","fixed_in":["0.35.2-150000.3.14.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.3","package":"python-M2Crypto","fixed_in":["0.35.2-150000.3.14.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap Micro 5.2","package":"python-M2Crypto","fixed_in":["0.35.2-150000.3.14.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:2","package":"m2crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.38.0-3"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"m2crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.38.0-3"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"m2crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.38.0-4"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"m2crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.38.0-4"}]}]},{"source":"osv","ecosystem":"Mageia:8","package":"python-m2crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.38.0-4.mga8"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"m2crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.30.1-5.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"m2crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.30.1-5.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"m2crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.38.0-2.oe2203"}]}]},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-web-ui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.7-1.el8ev"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.5.9-0.1.el8ev"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-backend","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.5.9-0.1.el8ev"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-dbscripts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.5.9-0.1.el8ev"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-health-check-bundler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.5.9-0.1.el8ev"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-restapi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.5.9-0.1.el8ev"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-setup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.5.9-0.1.el8ev"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-setup-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.5.9-0.1.el8ev"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-setup-plugin-cinderlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.5.9-0.1.el8ev"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-setup-plugin-imageio","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.5.9-0.1.el8ev"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-setup-plugin-ovirt-engine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.5.9-0.1.el8ev"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-setup-plugin-ovirt-engine-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.5.9-0.1.el8ev"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-setup-plugin-vmconsole-proxy-helper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.5.9-0.1.el8ev"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-setup-plugin-websocket-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.5.9-0.1.el8ev"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.5.9-0.1.el8ev"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-tools-backup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.5.9-0.1.el8ev"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-vmconsole-proxy-helper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.5.9-0.1.el8ev"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-webadmin-portal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.5.9-0.1.el8ev"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-websocket-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.5.9-0.1.el8ev"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"python3-ovirt-engine-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.5.9-0.1.el8ev"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"rhvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.5.9-0.1.el8ev"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Python 3 15 SP5","package":"python-M2Crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.40.0-150400.3.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"python-M2Crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.40.0-150400.3.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"python-M2Crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.40.0-150400.3.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"python-M2Crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.40.0-150400.3.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"python-M2Crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.40.0-150400.3.9.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"python-M2Crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.40.0-150400.3.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"python3-M2Crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.44.0-150600.19.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"python3-M2Crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.44.0-150600.19.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"python3-M2Crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.44.0-150400.13.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"python3-M2Crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.44.0-150400.13.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"python3-M2Crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.44.0-150400.13.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"python3-M2Crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.44.0-150400.13.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"python3-M2Crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.44.0-150400.13.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"python3-M2Crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.44.0-150400.13.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"python3-M2Crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.44.0-150400.13.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"python3-M2Crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.44.0-150400.13.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"python3-M2Crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.44.0-150400.13.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"python3-M2Crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.44.0-150400.13.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"python3-M2Crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.44.0-150400.13.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"python3-M2Crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.44.0-150400.13.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"python3-M2Crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.44.0-150400.13.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"python-M2Crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.29.0-23.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"python-M2Crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.29.0-23.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 12","package":"python-M2Crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.29.0-23.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"python-M2Crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.29.0-23.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"python-M2Crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.29.0-23.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"python-M2Crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.29.0-23.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"python-M2Crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.29.0-23.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"python-M2Crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.29.0-23.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"python-M2Crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.29.0-23.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"python-M2Crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.38.0-150400.3.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"python-M2Crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.38.0-150400.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"python-M2Crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.35.2-150000.3.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15","package":"python-M2Crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.35.2-150000.3.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Python 2 15 SP3","package":"python-M2Crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.35.2-150000.3.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"python-M2Crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.35.2-150000.3.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"python-M2Crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.35.2-150000.3.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"python-M2Crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.35.2-150000.3.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"python-M2Crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.35.2-150000.3.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"python-M2Crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.35.2-150000.3.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"python-M2Crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.35.2-150000.3.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"python-M2Crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.35.2-150000.3.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"python-M2Crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.35.2-150000.3.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"python-M2Crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.35.2-150000.3.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"python-M2Crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.35.2-150000.3.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"python-M2Crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.35.2-150000.3.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"python-M2Crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.35.2-150000.3.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"python-M2Crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.35.2-150000.3.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"python-M2Crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.35.2-150000.3.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.1","package":"python-M2Crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.35.2-150000.3.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"python-M2Crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.35.2-150000.3.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.1","package":"python-M2Crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.35.2-150000.3.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"python-M2Crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.35.2-150000.3.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"python-M2Crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.35.2-150000.3.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"python-M2Crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.35.2-150000.3.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"python-M2Crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.35.2-150000.3.14.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"python-M2Crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.35.2-150000.3.14.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"python-M2Crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.35.2-150000.3.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"python-M2Crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.38.0-150400.3.6.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"python-M2Crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.38.0-150400.3.6.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"m2crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.21.1-3ubuntu3","0.21.1-3ubuntu4","0.21.1-3ubuntu5"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"m2crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.21.1-3ubuntu5","0.22.6~rc4-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"m2crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.24.0-2","0.27.0-2","0.27.0-4","0.27.0-4build1","0.27.0-5"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"m2crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.31.0-6","0.31.0-6build1","0.31.0-7","0.31.0-8","0.31.0-9ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"m2crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.37.1-1ubuntu3","0.37.1-1ubuntu4","0.38.0-1ubuntu3","0.38.0-1ubuntu5"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"m2crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.38.0-4build1","0.38.0-4.1","0.40.1-0ubuntu1","0.40.1-1","0.40.1-2build1","0.40.1-2build2","0.40.1-2ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"m2crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.42.0-2.1build1","0.42.0-3"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"m2crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.42.0-3","0.46.2-2","0.46.2-3","0.46.2-3build1"]},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.2","package":"python-M2Crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.35.2-150000.3.14.1"}]}]}],"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"m2crypto_project","product":"m2crypto"},{"vendor":"microsoft","product":"m2crypto"},{"vendor":"redhat","product":"enterprise_linux"},{"vendor":"redhat","product":"virtualization"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1889823","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Third Party Advisory","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-25657","tags":["web","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1889823,https://gitlab.com/m2crypto/m2crypto/-/issues/285"},{"url":"https://access.redhat.com/errata/RHSA-2021:1169","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-25657","tags":["report"]},{"url":"https://github.com/advisories/GHSA-2j9v-8g47-mxh2"},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-25657","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2022-0274.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=30661","tags":["report"]},{"url":"https://lists.suse.com/pipermail/sle-security-updates/2022-July/011631.html","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QEML6RS6UMHDYGJ355BS2ARODQ4OYLRW/","tags":["web"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1852","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_virtualization/4.4/html-single/technical_notes","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1145658","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1155275","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1649479","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1666786","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1688186","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1729359","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1787235","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1802844","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1837221","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1843882","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1858420","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1882273","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1884233","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1895217","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1901503","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1901752","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1905108","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1905158","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1908441","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1910302","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1913198","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1914602","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1918162","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1919555","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1921104","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1921119","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1922200","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1924012","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1926854","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1927851","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1931514","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1931786","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_1169.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-20921","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-20921","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-20921","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-9r7h-6639-v5mw","tags":["advisory"]},{"url":"https://snyk.io/vuln/SNYK-JS-BOOTSTRAPSELECT-570457","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-25657","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-28458","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-28458","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-28458","tags":["advisory"]},{"url":"https://snyk.io/vuln/SNYK-JS-DATATABLESNET-1016402","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-28477","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-28477","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-28477","tags":["advisory"]},{"url":"https://snyk.io/vuln/SNYK-JS-IMMER-1019369","tags":["article"]},{"url":"https://www.suse.com/support/update/announcement/-2024-1448/suse-fu-20241448-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1205042","tags":["report"]},{"url":"https://bugzilla.suse.com/1212757","tags":["report"]},{"url":"https://bugzilla.suse.com/1217782","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25657","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/-2025-796/suse-ru-20250796-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1231589","tags":["report"]},{"url":"https://bugzilla.suse.com/1236664","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/-2025-800/suse-ru-20250800-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222527-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1178829","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222532-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222562-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222691-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-25657","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/NA4Y6CGBLBMV65UJ765OZDE4RW2SLYUP/","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2020-25657","description":"A flaw was found in all released versions of m2crypto, where they are vulnerable to Bleichenbacher timing attacks in the RSA decryption API via the timed processing of valid PKCS#1 v1.5 Ciphertext. The highest threat from this vulnerability is to confidentiality.","status":"published","published":"2021-01-12T14:33:02Z","modified":"2024-08-04T15:40:36.257Z","cwes":["CWE-385"],"updated_at":"2026-11-02T14:35:48.52216Z"}],"euvd":[{"id":"EUVD-2020-18321","description":"A flaw was found in all released versions of m2crypto, where they are vulnerable to Bleichenbacher timing attacks in the RSA decryption API via the timed processing of valid PKCS#1 v1.5 Ciphertext. The highest threat from this vulnerability is to confidentiality.","status":"published","published":"2021-01-12T14:33:02Z","modified":"2024-08-04T15:40:36Z","updated_at":"2026-11-03T03:07:17.317062Z"}],"ghsa":[{"id":"GHSA-2j9v-8g47-mxh2","title":"A flaw was found in all released versions of m2crypto, where they are vulnerable to...","description":"A flaw was found in all released versions of m2crypto, where they are vulnerable to Bleichenbacher timing attacks in the RSA decryption API via the timed processing of valid PKCS#1 v1.5 Ciphertext. The highest threat from this vulnerability is to confidentiality.","status":"published","published":"2022-05-24T17:38:31Z","modified":"2023-02-10T05:06:47Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-203","CWE-385"],"updated_at":"2026-11-02T14:54:02.847747Z"}],"nvd":[{"id":"CVE-2020-25657","description":"A flaw was found in all released versions of m2crypto, where they are vulnerable to Bleichenbacher timing attacks in the RSA decryption API via the timed processing of valid PKCS#1 v1.5 Ciphertext. The highest threat from this vulnerability is to confidentiality.","status":"published","published":"2021-01-12T15:15:13.72Z","modified":"2026-06-17T03:07:04.383Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-385"],"updated_at":"2026-11-02T14:06:28.892872Z"}],"osv":[{"id":"AZL-10076","title":"CVE-2020-25657 affecting package m2crypto for versions less than 0.38.0-3","description":"A flaw was found in all released versions of m2crypto, where they are vulnerable to Bleichenbacher timing attacks in the RSA decryption API via the timed processing of valid PKCS#1 v1.5 Ciphertext. The highest threat from this vulnerability is to confidentiality.","status":"published","published":"2021-01-12T15:15:13Z","modified":"2026-04-21T04:15:31.903308Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:28:00.253976Z"},{"id":"AZL-34969","title":"CVE-2020-25657 affecting package m2crypto for versions less than 0.38.0-3","description":"A flaw was found in all released versions of m2crypto, where they are vulnerable to Bleichenbacher timing attacks in the RSA decryption API via the timed processing of valid PKCS#1 v1.5 Ciphertext. The highest threat from this vulnerability is to confidentiality.","status":"published","published":"2021-01-12T15:15:13Z","modified":"2026-11-05T05:40:51Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-05T16:41:19.380321Z"},{"id":"CVE-2020-25657","description":"A flaw was found in all released versions of m2crypto, where they are vulnerable to Bleichenbacher timing attacks in the RSA decryption API via the timed processing of valid PKCS#1 v1.5 Ciphertext. The highest threat from this vulnerability is to confidentiality.","status":"published","published":"2021-01-12T15:15:13.72Z","modified":"2026-04-16T04:33:37.018867548Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:15.879068Z"},{"id":"DEBIAN-CVE-2020-25657","description":"A flaw was found in all released versions of m2crypto, where they are vulnerable to Bleichenbacher timing attacks in the RSA decryption API via the timed processing of valid PKCS#1 v1.5 Ciphertext. The highest threat from this vulnerability is to confidentiality.","status":"published","published":"2021-01-12T15:15:13.72Z","modified":"2026-10-26T12:01:47.575330859Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:33.729655Z"},{"id":"OESA-2022-1852","title":"m2crypto security update","description":"M2Crypto is a crypto and SSL toolkit for Python. It allows you to call OpenSSL functions from Python2 scripts.\r\n\r\nSecurity Fix(es):\r\n\r\nA flaw was found in all released versions of m2crypto, where they are vulnerable to Bleichenbacher timing attacks in the RSA decryption API via the timed processing of valid PKCS#1 v1.5 Ciphertext. The highest threat from this vulnerability is to confidentiality.(CVE-2020-25657)","status":"published","published":"2022-08-19T11:05:07Z","modified":"2026-08-18T01:17:08.3733149Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"RHSA-2021:1169","title":"Red Hat Security Advisory: RHV Manager (ovirt-engine) 4.4.z [ovirt-4.4.5] security, bug fix, enhancement","status":"published","published":"2024-09-16T05:20:39Z","modified":"2026-02-24T10:04:53Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.071325Z"},{"id":"UBUNTU-CVE-2020-25657","description":"A flaw was found in all released versions of m2crypto, where they are vulnerable to Bleichenbacher timing attacks in the RSA decryption API via the timed processing of valid PKCS#1 v1.5 Ciphertext. The highest threat from this vulnerability is to confidentiality.","status":"published","published":"2021-01-12T15:15:00Z","modified":"2026-05-20T16:04:19.473253128Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:54:23.905183Z"},{"id":"MGASA-2022-0274","title":"Updated python-m2crypto packages fix security vulnerability","description":"Bleichenbacher timing attacks in the RSA decryption API (CVE-2020-25657)\n","status":"published","published":"2022-08-05T21:00:44Z","modified":"2026-04-16T04:41:44.927217584Z","updated_at":"2026-11-02T15:49:41.849028Z"},{"id":"openSUSE-SU-2022:2562-1","title":"Security update for python-M2Crypto","description":"This update for python-M2Crypto fixes the following issues:\n\n- CVE-2020-25657: Fixed Bleichenbacher timing attacks in the RSA decryption API (bsc#1178829).\n","status":"published","published":"2022-07-27T12:36:42Z","modified":"2026-02-04T02:37:39.071936Z","updated_at":"2026-11-02T16:58:32.653274Z"},{"id":"openSUSE-SU-2024:12192-1","title":"python-M2Crypto-doc-0.38.0-3.1 on GA media","description":"These are all security issues fixed in the python-M2Crypto-doc-0.38.0-3.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:49:59.763852Z","updated_at":"2026-11-02T16:58:35.485255Z"},{"id":"SUSE-FU-2024:1448-1","title":"Feature update for python-M2Crypto","description":"This update for python-M2Crypto fixes the following issue:\n\n- Build for modern python stack\n- Adds python311-M2Crypto\n","status":"published","published":"2024-04-26T09:45:59Z","modified":"2026-02-04T03:58:58.221698Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-RU-2025:0796-1","title":"Recommended update for python3-M2Crypto","description":"This update for python3-M2Crypto fixes the following issues:\n\n- Fix spelling of BSD-2-Clause license.\n- Update to 0.44.0:\n- The real license is BSD 2-Clause, not MIT.\n- Remove python-M2Crypto.keyring, because PyPI broke GPG support\n- Build for modern python stack on SLE/Leap\n- require setuptools\n- Make tests running again.\n- Remove unnecessary fdupes call\n- Add python-typing as a dependency\n- SLE12 requires swig3 for a successful build, too","status":"published","published":"2025-03-06T12:28:11Z","modified":"2026-02-04T03:30:23.24771Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-RU-2025:0800-1","title":"Recommended update for python3-M2Crypto","description":"This update for python3-M2Crypto fixes the following issues:\n\n- Fix spelling of BSD-2-Clause license.\n- Update to 0.44.0:\n- The real license is BSD 2-Clause, not MIT.\n- Remove python-M2Crypto.keyring, because PyPI broke GPG support\n- Build for modern python stack on SLE/Leap\n- require setuptools\n- Make tests running again.\n- Remove unnecessary fdupes call\n- Add python-typing as a dependency\n- SLE12 requires swig3 for a successful build, too","status":"published","published":"2025-03-06T13:49:15Z","modified":"2026-02-04T03:41:03.229335Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2022:2527-1","title":"Security update for python-M2Crypto","description":"This update for python-M2Crypto fixes the following issues:\n\n- CVE-2020-25657: Fixed Bleichenbacher timing attacks in the RSA decryption API (bsc#1178829).\n","status":"published","published":"2022-07-22T09:00:55Z","modified":"2026-02-04T02:44:50.830263Z","updated_at":"2026-11-02T15:53:50.965375Z"},{"id":"SUSE-SU-2022:2532-1","title":"Security update for python-M2Crypto","description":"This update for python-M2Crypto fixes the following issues:\n\n- CVE-2020-25657: Fixed Bleichenbacher timing attacks in the RSA decryption API (bsc#1178829).\n","status":"published","published":"2022-07-22T15:23:29Z","modified":"2026-02-04T02:26:14.61128Z","updated_at":"2026-11-02T15:53:50.965375Z"},{"id":"SUSE-SU-2022:2562-1","title":"Security update for python-M2Crypto","description":"This update for python-M2Crypto fixes the following issues:\n\n- CVE-2020-25657: Fixed Bleichenbacher timing attacks in the RSA decryption API (bsc#1178829).\n","status":"published","published":"2022-07-27T12:36:32Z","modified":"2026-02-04T02:54:04.404131Z","updated_at":"2026-11-02T15:53:50.965375Z"},{"id":"SUSE-SU-2022:2691-1","title":"Security update for python-M2Crypto","description":"This update for python-M2Crypto fixes the following issues:\n\n- CVE-2020-25657: Fixed Bleichenbacher timing attacks in the RSA decryption API (bsc#1178829).\n","status":"published","published":"2022-08-05T16:12:27Z","modified":"2026-02-04T03:40:50.80028Z","updated_at":"2026-11-02T15:53:50.965375Z"}]}}