Approved changes feed: RSS · Atom

cpe:2.3:a:m2crypto_project:m2crypto:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorM2Crypto Project (d0f8af01-0ac2-5fb8-8c73-cd5d5e569be5)
ProductM2Crypto (650d2c3c-02a2-5bce-a820-ee2263d25092)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/m2crypto purl2cpe 2026-06-01 10:15:40.196139
pkg:deb/ubuntu/m2crypto purl2cpe 2026-06-01 10:15:40.196143
pkg:github/m2crypto/m2crypto purl2cpe 2026-06-01 10:15:40.196147
pkg:github/mcepl/m2crypto purl2cpe 2026-06-01 10:15:40.196154
pkg:gitlab/m2crypto/m2crypto purl2cpe 2026-06-01 10:15:40.196158
pkg:pypi/m2crypto purl2cpe 2026-06-01 10:15:40.196162
pkg:rpm/fedora/m2crypto purl2cpe 2026-06-01 10:15:40.196166
pkg:rpm/opensuse/python-m2crypto purl2cpe 2026-06-01 10:15:40.196169
pkg:sourceforge/m2crypto purl2cpe 2026-06-01 10:15:40.196173

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-25657 vulnerable 2026-06-08 05:22:37.105409 Details available
A flaw was found in all released versions of m2crypto, where they are vulnerable to Bleichenbacher timing attacks in the RSA decryption API via the timed processing of valid PKCS#1 v1.5 Ciphertext. The highest threat from this vulnerability is to confidentiality.
Published: 2021-01-12T14:33:02.000Z
Updated: 2024-08-04T15:40:36.257Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.