Vulnerability Description
Bleichenbacher's attack on PKCS #1 v1.5 padding for RSA in Microchip Libraries for Applications 2018-11-26 All up to 2018-11-26. The vulnerability can allow one to use Bleichenbacher's oracle attack to decrypt an encrypted ciphertext by making successive queries to the server using the vulnerable library, resulting in remote information disclosure.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ietf | Public Key Cryptography Standards \#1 | 1.5 |
| Microchip | Microchip Libraries For Applications | <= 2018-11-26 |
| Apple | Macos | - |
| Linux | Linux Kernel | - |
| Microsoft | Windows | - |
Related Weaknesses (CWE)
References
- http://archiv.infsec.ethz.ch/education/fs08/secsem/bleichenbacher98.pdfTechnical DescriptionThird Party Advisory
- http://microchip.comProduct
- https://bi-zone.medium.com/silence-will-fall-or-how-it-can-take-2-years-to-get-yTechnical DescriptionThird Party Advisory
- https://www.microchip.com/mplab/microchip-libraries-for-applicationsProduct
- http://archiv.infsec.ethz.ch/education/fs08/secsem/bleichenbacher98.pdfTechnical DescriptionThird Party Advisory
- http://microchip.comProduct
- https://bi-zone.medium.com/silence-will-fall-or-how-it-can-take-2-years-to-get-yTechnical DescriptionThird Party Advisory
- https://www.microchip.com/mplab/microchip-libraries-for-applicationsProduct
FAQ
What is CVE-2020-20950?
CVE-2020-20950 is a vulnerability with a CVSS score of 5.9 (MEDIUM). Bleichenbacher's attack on PKCS #1 v1.5 padding for RSA in Microchip Libraries for Applications 2018-11-26 All up to 2018-11-26. The vulnerability can allow one to use Bleichenbacher's oracle attack t...
How severe is CVE-2020-20950?
CVE-2020-20950 has been rated MEDIUM with a CVSS base score of 5.9/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-20950?
Check the references section above for vendor advisories and patch information. Affected products include: Ietf Public Key Cryptography Standards \#1, Microchip Microchip Libraries For Applications, Apple Macos, Linux Linux Kernel, Microsoft Windows.