CVE-2016-6298 jwcrypto lacks the Random Filling protection mechanism
MediumCVSS 5.3
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The _Rsa15 class in the RSA 1.5 algorithm implementation in jwa.py in jwcrypto before 0.3.2 lacks the Random Filling protection mechanism, which makes it easier for remote attackers to obtain cleartext data via a Million Message Attack (MMA).
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pypi jwcrypto(PyPI) | < 0.3.2 | 0.3.2 |
| pypi jwcrypto(PyPI) | = 0.2.0 | No fix listed |
| pypi jwcrypto(PyPI) | = 0.2.1 | No fix listed |
| pypi jwcrypto(PyPI) | = 0.3.0 | No fix listed |
| pypi jwcrypto(PyPI) | = 0.3.1 | No fix listed |
| pypi jwcrypto(PyPI) | < 0.4.0 | 0.4.0 |
| pypi jwcrypto(PyPI) | = v0.3.1 | No fix listed |
| pypi jwcrypto(PyPI) | = v0.3.0 | No fix listed |
| pypi jwcrypto(PyPI) | = v0.2.1 | No fix listed |
| pypi jwcrypto(PyPI) | = v0.2.0 | No fix listed |
| pypi jwcrypto(PyPI) | = v0.1.0 | No fix listed |
| debian/python-jwcrypto(Debian:12) | < 0.3.2-1 | 0.3.2-1 |
| debian/python-jwcrypto(Debian:13) | < 0.3.2-1 | 0.3.2-1 |
| debian/python-jwcrypto(Debian:14) | < 0.3.2-1 | 0.3.2-1 |
| latchset jwcrypto | < 0.3.2 | 0.3.2 |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com issue-tracking vendor-advisory
- github.com issue-tracking patch
- github.com issue-tracking patch vendor-advisory
- github.com product
- github.com patch vendor-advisory
- github.com
- web.archive.org
- 92729 broken-link third-party-advisory vdb-entry
- github.com vendor-advisory
- Debian Security Tracker CVE-2016-6298 vendor-advisory