CVE-2020-25658: Fedoraproject Fedora

Medium severity, CVSS 5.9. EPSS: 1.7% chance of exploitation in the next 30 days.

It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decrypt parts of the cipher text encrypted with RSA.

Affected products

• Fedoraproject Fedora: version 33 only; version 34 only; version 35 only
• Python-Rsa Project Python-Rsa: from 2.1, before 4.7 (fixed in 4.7)
• Red Hat Openstack Platform: version 13.0 only; version 16.0 only

Published 2020-11-12. Last modified 2026-06-17.