M2crypto Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

M2crypto Project records in CISA KEV

No M2crypto Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

M2crypto 2 records LOW

Records

2 records in M2crypto · all components

TI-2023-27711 CVE-2023-50781 · GHSA-944j-8ch6-rf6x

M2crypto: bleichenbacher timing attacks in the rsa decryption api - incomplete fix for cve-2020-25657

LOW 35

A flaw was found in m2crypto.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01124 Published 2024-02-05 No fix listed CWE-203

TI-2020-15674 CVE-2020-25657 · GHSA-2j9v-8g47-mxh2

A flaw was found in all released versions of m2crypto, where they are vulnerable to…

LOW 30

A flaw was found in all released versions of m2crypto, where they are vulnerable to Bleichenbacher timing attacks in the RSA decryption API via the timed processing of valid PKCS#1 v1.5 Ciphertext.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.01763 Published 2021-01-12 Partial fix CWE-385

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0