CVE-2023-50781: M2crypto: bleichenbacher timing attacks in the rsa decryption api - incomplete fix for cve-2020-25657
A flaw was found in m2crypto. This issue may allow a remote attacker to decrypt captured messages in TLS servers that use RSA key exchanges, which may lead to exposure of confidential or sensitive data.
Other sources
Description: The fix for CVE-2020-25657 is not addressing the leakage in the RSA decryption. Because of the API design, the fix is generally not believed to be possible to be fully addressed. The issue can be mitigated by using a cryptographic backend that implements implicit rejection (Marvin workaround). Only applications that use RSA decryption with PKCS#1 v1.5 padding are affected.
References: https://gitlab.com/m2crypto/m2crypto/-/issues/342 https://people.redhat.com/~hkario/marvin/ https://github.com/openssl/openssl/pull/13817
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-50781?
CVE-2023-50781 is classified as a critical vulnerability due to its potential to allow remote attackers to decrypt sensitive data.
How do I fix CVE-2023-50781?
To mitigate CVE-2023-50781, update m2crypto to a version higher than 0.40.1 immediately.
Which systems are affected by CVE-2023-50781?
CVE-2023-50781 affects m2crypto versions up to and including 0.40.1 on Red Hat Enterprise Linux 8.0, 9.0, and Red Hat Update Infrastructure 4.
Can CVE-2023-50781 lead to data breaches?
Yes, CVE-2023-50781 could potentially lead to data breaches by allowing attackers to decrypt messages in TLS servers using RSA key exchanges.
What should I do if I cannot update due to compatibility issues related to CVE-2023-50781?
If unable to update due to compatibility issues, evaluate potential workarounds such as using alternative cryptographic libraries while seeking a permanent fix.