USN-6595-1 — pycryptodome vulnerability

Summary

It was discovered that PyCryptodome had a timing side-channel when
performing OAEP decryption. A remote attacker could possibly use this issue
to recover sensitive information.

Fixed packages 1

Release	Package	Fixed in
Ubuntu · 22.04 LTS 22.04:LTS	pycryptodome	3.11.0+dfsg1-3ubuntu0.1

Vulnerabilities 1

Medium 5.9

CVE-2023-52323

PyCryptodome and pycryptodomex side-channel leakage for OAEP decryption

PyCryptodome and pycryptodomex before 3.19.1 allow side-channel leakage for OAEP decryption, exploitable for a Manger attack.

jwt-tool pycryptodome pycryptodome pycryptodome Debian Ubuntu Wolfi PyPI

Jan 5, 2024

References

report
https://ubuntu.com/security/CVE-2023-52323

pycryptodome vulnerability

Summary

Fixed packages 1

Vulnerabilities 1

PyCryptodome and pycryptodomex side-channel leakage for OAEP decryption

References