{"id":"GHSA-87mp-xc4x-x8rh","aliases":[],"status":"published","title":"asymmetricrypt/asymmetricrypt Padding Oracle Vulnerability in RSA Encryption","description":"The encryption and decryption process were vulnerable against the Bleichenbacher's attack, which is a padding oracle vulnerability disclosed in the 98'.\nThe issue was about the wrong padding utilized, which allowed to retrieve the encrypted content.\nThe OPENSSL_PKCS1_PADDING version, aka PKCS v1.5 was vulnerable (is the one set by default when using openssl_* methods), while the PKCS v2.0 isn't anymore (it's also called OAEP).\n\nA fix for this vulnerability was merged at https://github.com/Cosmicist/AsymmetriCrypt/pull/5/commits/a0318cfc5022f2a7715322dba3ff91d475ace7c6.","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-327"],"published":"2024-05-15T17:47:31Z","modified":"2024-11-29T05:32:28Z","affected":[{"source":"ghsa","ecosystem":"Packagist","package":"asymmetricrypt/asymmetricrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"0.3.0"}]}]},{"source":"osv","ecosystem":"Packagist","package":"asymmetricrypt/asymmetricrypt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"0.3.0"}]}],"versions":["0.1.0","0.2.0","0.2.1","0.3.0"]}],"references":[{"url":"https://github.com/Cosmicist/AsymmetriCrypt/issues/4","tags":["web"]},{"url":"https://github.com/Cosmicist/AsymmetriCrypt/pull/5","tags":["web"]},{"url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/asymmetricrypt/asymmetricrypt/2017-11-20.yaml","tags":["web"]},{"url":"https://github.com/advisories/GHSA-87mp-xc4x-x8rh"},{"url":"https://github.com/Cosmicist/AsymmetriCrypt","tags":["package"]}],"sources":{"ghsa":[{"id":"GHSA-87mp-xc4x-x8rh","title":"asymmetricrypt/asymmetricrypt Padding Oracle Vulnerability in RSA Encryption","description":"The encryption and decryption process were vulnerable against the Bleichenbacher's attack, which is a padding oracle vulnerability disclosed in the 98'.\nThe issue was about the wrong padding utilized, which allowed to retrieve the encrypted content.\nThe OPENSSL_PKCS1_PADDING version, aka PKCS v1.5 was vulnerable (is the one set by default when using openssl_* methods), while the PKCS v2.0 isn't anymore (it's also called OAEP).\n\nA fix for this vulnerability was merged at https://github.com/Cosmicist/AsymmetriCrypt/pull/5/commits/a0318cfc5022f2a7715322dba3ff91d475ace7c6.","status":"published","published":"2024-05-15T17:47:31Z","modified":"2024-05-15T17:47:31Z","cwes":["CWE-327"],"updated_at":"2026-11-02T14:37:49.48194Z"}],"osv":[{"id":"GHSA-87mp-xc4x-x8rh","title":"asymmetricrypt/asymmetricrypt Padding Oracle Vulnerability in RSA Encryption","description":"The encryption and decryption process were vulnerable against the Bleichenbacher's attack, which is a padding oracle vulnerability disclosed in the 98'.\nThe issue was about the wrong padding utilized, which allowed to retrieve the encrypted content.\nThe OPENSSL_PKCS1_PADDING version, aka PKCS v1.5 was vulnerable (is the one set by default when using openssl_* methods), while the PKCS v2.0 isn't anymore (it's also called OAEP).\n\nA fix for this vulnerability was merged at https://github.com/Cosmicist/AsymmetriCrypt/pull/5/commits/a0318cfc5022f2a7715322dba3ff91d475ace7c6.","status":"published","published":"2024-05-15T17:47:31Z","modified":"2024-11-29T05:32:28.469089Z","cwes":["CWE-327"],"updated_at":"2026-11-02T15:46:42.077781Z"}]}}