CVE-2020-20950: Medium severity IETF Public Key Cryptography Standards \#1 vulnerability
Bleichenbacher's attack on PKCS #1 v1.5 padding for RSA in Microchip Libraries for Applications 2018-11-26 All up to 2018-11-26. The vulnerability can allow one to use Bleichenbacher's oracle attack to decrypt an encrypted ciphertext by making successive queries to the server using the vulnerable library, resulting in remote information disclosure.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-20950?
CVE-2020-20950 is a vulnerability that allows an attacker to use Bleichenbacher's oracle attack to decrypt an encrypted ciphertext.
What is the severity of CVE-2020-20950?
CVE-2020-20950 has a severity rating of medium, with a severity value of 5.9.
Which software is affected by CVE-2020-20950?
CVE-2020-20950 affects Microchip Libraries for Applications up to version 2018-11-26 and the Ietf Public Key Cryptography Standards #1 version 1.5.
How can CVE-2020-20950 be exploited?
CVE-2020-20950 can be exploited by making successive queries to the server using the vulnerable library, allowing for the decryption of encrypted ciphertext.
Is Apple macOS, Linux kernel, or Microsoft Windows affected by CVE-2020-20950?
No, Apple macOS, Linux kernel, and Microsoft Windows are not vulnerable to CVE-2020-20950.