The verify function in the RSA package for Python (Python-RSA) before 3.3 allows attackers to spoof signatures with a small public exponent via crafted signature padding, aka a BERserk attack.

Fix for CVE-2016-1494

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

It was found that python-rsa is vulnerable to Bleichenbacher'06 attack, allowing attacker to fake signatures for any public key with low exponent. (CVE-2016-1494)

Filippo Valsorda reports :

python-rsa is vulnerable to a straightforward variant of the Bleichenbacher'06 attack against RSA signature verification with low public exponent.

This update for python-rsa fixes the following security issues :

  - CVE-2016-1494: Possible signature forgery via     Bleichenbacher attack (bsc#960680)

The following bugs fixes are included :

  - FATE#319904, boo#954690: Support VPN feature in     google-cloud-sdk

  - boo#935595: missing coreutils requirement

ID	Name	Product	Family	Severity
89612	Fedora 22 : python-rsa-3.3-2.fc22 (2016-c845706426)	Nessus	Fedora Local Security Checks	medium
89566	Fedora 23 : python-rsa-3.3-2.fc23 (2016-70edfbbcef)	Nessus	Fedora Local Security Checks	medium
88656	Amazon Linux AMI : python-rsa (ALAS-2016-644)	Nessus	Amazon Linux Local Security Checks	medium
88585	FreeBSD : py-rsa -- Bleichenbacher'06 signature forgery vulnerability (e78bfc9d-cb1e-11e5-b251-0050562a4d7b)	Nessus	FreeBSD Local Security Checks	medium
88123	openSUSE Security Update : python-rsa (openSUSE-2016-33)	Nessus	SuSE Local Security Checks	medium

Detections

Analytics

CVE-2016-1494

medium

Tenable Plugins

medium

medium

medium

medium

medium