CVE-2016-1494
PoC —CVSS 3.0
5.3 medium
EPSS
7%p94
Published
()
Modified
Description
The verify function in the RSA package for Python (Python-RSA) before 3.3 allows attackers to spoof signatures with a small public exponent via crafted signature padding, aka a BERserk attack.
- Vendors
- pythonfedoraprojectopensuse
- Products
- rsa, fedora, leap, opensuse
- Weakness
- CWE-20
- Vector
- CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
In the news0 stories
No ingested article mentions this CVE yet.