CVE-2016-1494

Description

The verify function in the RSA package for Python (Python-RSA) before 3.3 allows attackers to spoof signatures with a small public exponent via crafted signature padding, aka a BERserk attack.

Risk Information

Base Score

5.3

MODERATE

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

EPSS Score

Exploitation Probability

5.091

Associated Vulnerability

Vulnerability	OS Platform
Multiple vulnerabilities affected in Python 3.2.6	Windows
Vulnerabilities CVE-2016-1494 are fixed in Python-rsa 3.3	Windows
Vulnerabilities CVE-2016-1494 are fixed in Python-rsa for linux 3.3	Linux
Improper Input Validation Vulnerability (CVE-2016-1494)	NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234