CVE-2023-50781Published

M2crypto: bleichenbacher timing attacks in the rsa decryption api - incomplete fix for cve-2020-25657

Exact source revision recorded 23 Oct 2026 15:48:27 UTC. It does not establish the source's current position. Latest evidence.

Recorded JSON

cve-program · CVE-2023-50781

Published

m2crypto

https://gitlab.com/m2crypto/m2crypto

Original vendor version evidence · not evaluated as a NuGet range

{
                    "packageName": "m2crypto",
                    "collectionURL": "https://gitlab.com/m2crypto/m2crypto",
                    "defaultStatus": "affected"
                }

m2crypto

https://access.redhat.com/downloads/content/package-browser/

Original vendor version evidence · not evaluated as a NuGet range

{
                    "vendor": "Red Hat",
                    "product": "Red Hat Enterprise Linux 6",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "m2crypto",
                    "defaultStatus": "unknown",
                    "cpes": [
                        "cpe:/o:redhat:enterprise_linux:6"
                    ]
                }

m2crypto

https://access.redhat.com/downloads/content/package-browser/

Original vendor version evidence · not evaluated as a NuGet range

{
                    "vendor": "Red Hat",
                    "product": "Red Hat Enterprise Linux 7",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "m2crypto",
                    "defaultStatus": "unknown",
                    "cpes": [
                        "cpe:/o:redhat:enterprise_linux:7"
                    ]
                }

virt-who

https://access.redhat.com/downloads/content/package-browser/

Original vendor version evidence · not evaluated as a NuGet range

{
                    "vendor": "Red Hat",
                    "product": "Red Hat Enterprise Linux 8",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "virt-who",
                    "defaultStatus": "unaffected",
                    "cpes": [
                        "cpe:/o:redhat:enterprise_linux:8"
                    ]
                }

pywbem

https://access.redhat.com/downloads/content/package-browser/

Original vendor version evidence · not evaluated as a NuGet range

{
                    "vendor": "Red Hat",
                    "product": "Red Hat Enterprise Linux 9",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "pywbem",
                    "defaultStatus": "unaffected",
                    "cpes": [
                        "cpe:/o:redhat:enterprise_linux:9"
                    ]
                }

virt-who

https://access.redhat.com/downloads/content/package-browser/

Original vendor version evidence · not evaluated as a NuGet range

{
                    "vendor": "Red Hat",
                    "product": "Red Hat Enterprise Linux 9",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "virt-who",
                    "defaultStatus": "unaffected",
                    "cpes": [
                        "cpe:/o:redhat:enterprise_linux:9"
                    ]
                }

m2crypto

https://access.redhat.com/downloads/content/package-browser/

Original vendor version evidence · not evaluated as a NuGet range

{
                    "vendor": "Red Hat",
                    "product": "Red Hat Update Infrastructure 4 for Cloud Providers",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "m2crypto",
                    "defaultStatus": "affected",
                    "cpes": [
                        "cpe:/a:redhat:rhui:4::el8"
                    ]
                }

m2crypto

https://access.redhat.com/downloads/content/package-browser/

Original vendor version evidence · not evaluated as a NuGet range

{
                    "vendor": "Red Hat",
                    "product": "Red Hat Virtualization 4",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "m2crypto",
                    "defaultStatus": "unaffected",
                    "cpes": [
                        "cpe:/o:redhat:rhev_hypervisor:4"
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON