Skip to content
OpenAdvisories

Package · Ubuntu

tlslite-ng

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 7.5
    CVE-2020-26263

    RSA vulnerability in tslite-ng

    tlslite-ng is an open source python library that implements SSL and TLS cryptographic protocols. In tlslite-ng before versions 0.7.6 and 0.8.0-alpha39, the code that performs decryption and padding check in RSA PKCS#1 v1.5 decryption is data dependant. In par…

    tlsfuzzer tlslite-ng tlslite-ng tlslite-ng Ubuntu PyPI
  • Medium 5.9
    CVE-2018-1000159

    tlslite-ng off-by-one error on mac checking

    tlslite-ng version 0.7.3 and earlier, since commit d7b288316bca7bcdd082e6ccff5491e241305233 contains a CWE-354: Improper Validation of Integrity Check Value vulnerability in TLS implementation, tlslite/utils/constanttime.py: ct_check_cbc_mac_and_pad(); line "…

    tlslite-ng tlslite-ng Ubuntu PyPI