Skip to content
OpenAdvisories
High USN-4478-2 1 CVE

python-rsa vulnerability

Published Feb 21, 2022 · Updated Jun 25, 2026

Ecosystem: Ubuntu

Summary

USN-4478-1 fixed a vulnerability in Python-RSA.
This update provides the corresponding update for Ubuntu 16.04 ESM,
Ubuntu 18.04 ESM and Ubuntu 20.04 ESM.

Original advisory details:

It was discovered that Python-RSA incorrectly handled certain ciphertexts.
An attacker could possibly use this issue to obtain sensitive information.

Fixed packages 3

ReleasePackageFixed in
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS python-rsa 3.2.3-1.1ubuntu0.1~esm1
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS python-rsa 3.4.2-1ubuntu0.1~esm1
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS python-rsa 4.0-3ubuntu0.1~esm1

Vulnerabilities 1

  • High 7.5
    CVE-2020-13757

    Python-RSA decryption of ciphertext leads to DoS

    Python-RSA before 4.1 ignores leading '\0' bytes during decryption of ciphertext. This could conceivably have a security-relevant impact, e.g., by helping an attacker to infer that an application uses Python-RSA, or if the length of accepted ciphertext affect…

    rsa python-rsa python-rsa Debian Ubuntu PyPI

References

  • report
    https://ubuntu.com/security/CVE-2020-13757