CVE-2020-20950 | BDVDB-2026-147695 Detail

Description#

Bleichenbacher's attack on PKCS #1 v1.5 padding for RSA in Microchip Libraries for Applications 2018-11-26 All up to 2018-11-26. The vulnerability can allow one to use Bleichenbacher's oracle attack to decrypt an encrypted ciphertext by making successive queries to the server using the vulnerable library, resulting in remote information disclosure.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://archiv.infsec.ethz.ch/education/fs08/secsem/bleichenbacher98.pdf
https://www.microchip.com/mplab/microchip-libraries-for-applications
https://bi-zone.medium.com/silence-will-fall-or-how-it-can-take-2-years-to-get-your-vuln-registered-e6134846f5bb

Exploit#

No public exploit known

History#

Version 12021-01-19Record published in the CVE List.
Version 22026-07-09Most recent update recorded in the CVE List.