[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2016-1494":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":19,"cwes":20,"cpes":23,"technologies":31,"references":37,"score":52,"epss_score":53,"epss_percentile":54,"is_kev":55,"cisa_kev_date_added":56,"cisa_kev_due_date":56,"cisa_ssvc":57,"attack_mappings":63,"exploits":70},197461,"CVE-2016-1494","EUVD-2016-0032","Python RSA allows attackers to spoof signatures\n\nThe verify function in the RSA package for Python (Python-RSA) before 3.3 allows attackers to spoof signatures with a small public exponent via crafted signature padding, aka a BERserk attack.","2022-05-14T00:59:00Z",{"cvss_v3.0":10},{"scope":11,"version":12,"baseScore":13,"attackVector":14,"baseSeverity":15,"vectorString":16,"integrityImpact":17,"userInteraction":18,"attackComplexity":17,"availabilityImpact":18,"privilegesRequired":18,"confidentialityImpact":18},"UNCHANGED","3.0",5.3,"NETWORK","MEDIUM","CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N","LOW","NONE",true,[21,22],"CWE-20","CWE-347",[24,25,26,27,28,29,30],"cpe:2.3:a:python:rsa:*:*:*:*:*:python:*:*","cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*","cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*","cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:*","cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*","cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*","cpe:2.3:a:rsa:rsa:*:*:*:*:*:*:*:*",[32,33,34,35,36],"Opensuse Opensuse","Python Rsa","Fedoraproject Fedora","Opensuse Leap","Rsa Rsa",[38,39,40,41,42,43,44,45,46,47,48,49,50,51],"http:\u002F\u002Flists.fedoraproject.org\u002Fpipermail\u002Fpackage-announce\u002F2016-January\u002F175897.html","http:\u002F\u002Flists.fedoraproject.org\u002Fpipermail\u002Fpackage-announce\u002F2016-January\u002F175942.html","http:\u002F\u002Flists.opensuse.org\u002Fopensuse-updates\u002F2016-01\u002Fmsg00032.html","http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2016\u002F01\u002F05\u002F1","http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2016\u002F01\u002F05\u002F3","http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F79829","https:\u002F\u002Fbitbucket.org\u002Fsybren\u002Fpython-rsa\u002Fpull-requests\u002F14\u002Fsecurity-fix-bb06-attack-in-verify-by\u002Fdiff","https:\u002F\u002Fblog.filippo.io\u002Fbleichenbacher-06-signature-forgery-in-python-rsa\u002F","https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2016-1494","https:\u002F\u002Fgithub.com\u002Fsybrenstuvel\u002Fpython-rsa\u002Fcommit\u002Fab5d21c3b554f926d51ff3ad9c794bcf32e95b3c","https:\u002F\u002Fblog.filippo.io\u002Fbleichenbacher-06-signature-forgery-in-python-rsa","https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Frsa\u002FPYSEC-2016-10.yaml","https:\u002F\u002Fgithub.com\u002Fsybrenstuvel\u002Fpython-rsa","https:\u002F\u002Fweb.archive.org\u002Fweb\u002F20210123020914\u002Fhttp:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F79829",0.62,0.07054,0.94197,false,null,{"timestamp":56,"automatable":58,"tech_impact":59,"exploitation":60,"cisa_decision":61,"cisa_remediation_timeline":62},"no","partial","none",{},"FSU",[64],{"name":65,"source":66,"tactics":67,"technique_id":69},"Exploit Public-Facing Application","attack_vector",[68],"initial-access","T1190",[71],{"link":45}]