CVE-2020-20950 - CVE House
Back to Database
Status published Medium CVE-2020-20950

Bleichenbacher's attack on PKCS #1 v1.5 padding for RSA in...

Vulnerability Description

Bleichenbacher's attack on PKCS #1 v1.5 padding for RSA in Microchip Libraries for Applications 2018-11-26 All up to 2018-11-26. The vulnerability can allow one to use Bleichenbacher's oracle attack to decrypt an encrypted ciphertext by making successive queries to the server using the vulnerable library, resulting in remote information disclosure.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-20950

Credits & Attribution

No credits recorded in the NVD database.

References

More from ietf

View All →
CVE-2016-10142
An issue was discovered in the IPv6 protocol specification, related...
High 8.6
CVE-2015-8960
The TLS protocol 1.2 and earlier supports the rsa_fixed_dh, dss_fixed_dh,...
High 8.1
CVE-2007-2242
The IPv6 protocol allows remote attackers to cause a denial...
High 7.8
CVE-2004-2761
The MD5 Message-Digest Algorithm is not collision resistant, which makes...
Unknown 0

Affected Vendor

Affected Software

public key cryptography standards \#1, microchip libraries for applications
Vulnerable Versions:
1.5, 0

Timeline

Official Publish: January 19th, 2021
Last Modified: July 9th, 2026
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.