{"id":"CVE-2023-50781","aliases":["AZL-101841","DEBIAN-CVE-2023-50781","EUVD-2024-0587","GHSA-944j-8ch6-rf6x","PYSEC-2026-1595","UBUNTU-CVE-2023-50781"],"status":"published","title":"M2crypto: bleichenbacher timing attacks in the rsa decryption api - incomplete fix for cve-2020-25657","description":"A flaw was found in m2crypto. This issue may allow a remote attacker to decrypt captured messages in TLS servers that use RSA key exchanges, which may lead to exposure of confidential or sensitive data.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.01124,"percentile":0.66683,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-203","CWE-208","CWE-385"],"published":"2024-02-05T20:45:14Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"Debian:13","package":"m2crypto","fixed_in":["0.40.1-3"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"PyPI","package":"m2crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"0.40.1"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"m2crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"0.38.0-5"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"m2crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.38.0-4","0.38.0-4.1","0.40.1-1","0.40.1-2","0.40.1-3","0.40.1-4","0.41.0+ds-1","0.41.0+ds-2","0.41.0+ds-3","0.41.0-1","0.42.0-1","0.42.0-2","0.42.0-2.1","0.42.0-3","0.46.2-1","0.46.2-2","0.46.2-3"]},{"source":"osv","ecosystem":"Debian:13","package":"m2crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.40.1-3"}]}]},{"source":"osv","ecosystem":"PyPI","package":"m2crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"0.40.1"}]}],"versions":["0.11","0.13","0.15","0.16","0.17","0.18","0.18.1","0.18.2","0.19","0.19.1","0.20","0.20.1","0.20.2","0.20beta1","0.21","0.21.1","0.22.3","0.22.4","0.22.5","0.23.0","0.24.0","0.25.0","0.25.1","0.26.0","0.26.2","0.26.3","0.26.4","0.27.0","0.28.0","0.28.1","0.28.2","0.29.0","0.30.0","0.30.1","0.31.0","0.32.0","0.33.0","0.34.0","0.35.0","0.35.1","0.35.2","0.36.0","0.37.0","0.37.1","0.38.0","0.39.0","0.40.0","0.40.1"]},{"source":"osv","ecosystem":"PyPI","package":"m2crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"0.40.1"}]}],"versions":["0.11","0.13","0.15","0.16","0.17","0.18","0.18.1","0.18.2","0.19","0.19.1","0.20","0.20.1","0.20.2","0.20beta1","0.21","0.21.1","0.22.3","0.22.4","0.22.5","0.23.0","0.24.0","0.25.0","0.25.1","0.26.0","0.26.2","0.26.3","0.26.4","0.27.0","0.28.0","0.28.1","0.28.2","0.29.0","0.30.0","0.30.1","0.31.0","0.32.0","0.33.0","0.34.0","0.35.0","0.35.1","0.35.2","0.36.0","0.37.0","0.37.1","0.38.0","0.39.0","0.40.0","0.40.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"m2crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.21.1-3ubuntu3","0.21.1-3ubuntu4","0.21.1-3ubuntu5"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"m2crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.21.1-3ubuntu5","0.22.6~rc4-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"m2crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.24.0-2","0.27.0-2","0.27.0-4","0.27.0-4build1","0.27.0-5"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"m2crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.31.0-6","0.31.0-6build1","0.31.0-7","0.31.0-8","0.31.0-9ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"m2crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.37.1-1ubuntu3","0.37.1-1ubuntu4","0.38.0-1ubuntu3","0.38.0-1ubuntu5"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"m2crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.38.0-4build1","0.38.0-4.1","0.40.1-0ubuntu1","0.40.1-1","0.40.1-2build1","0.40.1-2build2","0.40.1-2ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"m2crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.42.0-2.1build1","0.42.0-3"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"m2crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.42.0-3","0.46.2-2","0.46.2-3","0.46.2-3build1"]}],"products":[{"vendor":"m2crypto_project","product":"m2crypto"},{"vendor":"red hat","product":"red hat enterprise linux 6"},{"vendor":"red hat","product":"red hat enterprise linux 7"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"red hat","product":"red hat update infrastructure 4 for cloud providers"},{"vendor":"red hat","product":"red hat virtualization 4"},{"vendor":"redhat","product":"enterprise_linux"},{"vendor":"redhat","product":"update_infrastructure"},{"vendor":"siemens","product":"simatic s7-1500 tm mfp - gnu/linux subsystem"}],"references":[{"url":"https://access.redhat.com/security/cve/CVE-2023-50781","tags":["vdb-entry","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2254426","tags":["issue-tracking","x_refsource_REDHAT","x_transferred","Issue Tracking","report","web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-265688.html","tags":["Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-50781","tags":["web","advisory"]},{"url":"https://gitlab.com/m2crypto/m2crypto/-/issues/342","tags":["web","report"]},{"url":"https://github.com/advisories/GHSA-944j-8ch6-rf6x","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-50781","tags":["advisory"]},{"url":"https://gitlab.com/m2crypto/m2crypto","tags":["package"]},{"url":"https://pypi.org/project/m2crypto","tags":["package"]},{"url":"https://ubuntu.com/security/CVE-2023-50781","tags":["report"]},{"url":"https://people.redhat.com/~hkario/marvin/","tags":["report"]},{"url":"https://github.com/openssl/openssl/pull/13817","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-50781","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2023-50781","title":"M2crypto: bleichenbacher timing attacks in the rsa decryption api - incomplete fix for cve-2020-25657","description":"A flaw was found in m2crypto. This issue may allow a remote attacker to decrypt captured messages in TLS servers that use RSA key exchanges, which may lead to exposure of confidential or sensitive data.","status":"published","published":"2024-02-05T20:45:14.089Z","modified":"2026-10-15T00:08:56.351Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"cna"}],"cwes":["CWE-203"],"updated_at":"2026-11-02T14:35:34.55015Z"}],"euvd":[{"id":"EUVD-2024-0587","description":"A flaw was found in m2crypto. This issue may allow a remote attacker to decrypt captured messages in TLS servers that use RSA key exchanges, which may lead to exposure of confidential or sensitive data.","status":"published","published":"2024-02-05T20:45:14Z","modified":"2026-10-15T00:08:56Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T17:27:11.209168Z"}],"ghsa":[{"id":"GHSA-944j-8ch6-rf6x","title":"m2crypto Bleichenbacher timing attack - incomplete fix for CVE-2020-25657","description":"A flaw was found in m2crypto. This issue may allow a remote attacker to decrypt captured messages in TLS servers that use RSA key exchanges, which may lead to exposure of confidential or sensitive data.","status":"published","published":"2024-02-05T21:30:31Z","modified":"2026-02-27T20:57:09Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-203","CWE-208","CWE-385"],"updated_at":"2026-11-02T14:39:28.962954Z"}],"nvd":[{"id":"CVE-2023-50781","description":"A flaw was found in m2crypto. This issue may allow a remote attacker to decrypt captured messages in TLS servers that use RSA key exchanges, which may lead to exposure of confidential or sensitive data.","status":"published","published":"2024-02-05T21:15:10.97Z","modified":"2026-10-15T01:17:12.16Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary"}],"cwes":["CWE-203"],"updated_at":"2026-11-02T14:09:04.527564Z"}],"osv":[{"id":"AZL-101841","title":"CVE-2023-50781 affecting package m2crypto 0.38.0-5","description":"A flaw was found in m2crypto. This issue may allow a remote attacker to decrypt captured messages in TLS servers that use RSA key exchanges, which may lead to exposure of confidential or sensitive data.","status":"published","published":"2024-02-05T21:15:10Z","modified":"2026-11-05T05:40:51Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-05T16:41:17.128158Z"},{"id":"CVE-2023-50781","description":"A flaw was found in m2crypto. This issue may allow a remote attacker to decrypt captured messages in TLS servers that use RSA key exchanges, which may lead to exposure of confidential or sensitive data.","status":"published","published":"2024-02-05T21:15:10.97Z","modified":"2026-07-07T17:56:27.469638616Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:44:35.245372Z"},{"id":"DEBIAN-CVE-2023-50781","description":"A flaw was found in m2crypto. This issue may allow a remote attacker to decrypt captured messages in TLS servers that use RSA key exchanges, which may lead to exposure of confidential or sensitive data.","status":"published","published":"2024-02-05T21:15:10.97Z","modified":"2026-10-26T18:02:42.875101205Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:45:40.586408Z"},{"id":"GHSA-944j-8ch6-rf6x","title":"m2crypto Bleichenbacher timing attack - incomplete fix for CVE-2020-25657","description":"A flaw was found in m2crypto. This issue may allow a remote attacker to decrypt captured messages in TLS servers that use RSA key exchanges, which may lead to exposure of confidential or sensitive data.","status":"published","published":"2024-02-05T21:30:31Z","modified":"2026-07-07T17:56:27.469638616Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-203","CWE-208","CWE-385"],"updated_at":"2026-11-02T15:46:43.123867Z"},{"id":"PYSEC-2026-1595","title":"m2crypto Bleichenbacher timing attack - incomplete fix for CVE-2020-25657","description":"A flaw was found in m2crypto. This issue may allow a remote attacker to decrypt captured messages in TLS servers that use RSA key exchanges, which may lead to exposure of confidential or sensitive data.","status":"published","published":"2026-07-07T11:45:31.910766Z","modified":"2026-07-07T17:46:56.992235943Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:55.06457Z"},{"id":"UBUNTU-CVE-2023-50781","description":"A flaw was found in m2crypto. This issue may allow a remote attacker to decrypt captured messages in TLS servers that use RSA key exchanges, which may lead to exposure of confidential or sensitive data.","status":"published","published":"2024-02-05T21:15:00Z","modified":"2026-05-20T16:13:56.246279383Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T16:54:23.935133Z"}]}}