CVE-2016-6298

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

The _Rsa15 class in the RSA 1.5 algorithm implementation in jwa.py in jwcrypto before 0.3.2 lacks the Random Filling protection mechanism, which makes it easier for remote attackers to obtain cleartext data via a Million Message Attack (MMA).

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-200

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.securityfocus.com/bid/92729Broken Link, Third Party Advisory, VDB Entry
https://github.com/latchset/jwcrypto/commit/eb5be5bd94c8cae1d7f3ba9801377084d8e5a7baIssue Tracking, Patch, Vendor Advisory
https://github.com/latchset/jwcrypto/issues/65Issue Tracking, Vendor Advisory
https://github.com/latchset/jwcrypto/pull/66Issue Tracking, Patch
https://github.com/latchset/jwcrypto/releases/tag/v0.3.2Patch, Vendor Advisory
http://www.securityfocus.com/bid/92729Broken Link, Third Party Advisory, VDB Entry
https://github.com/latchset/jwcrypto/commit/eb5be5bd94c8cae1d7f3ba9801377084d8e5a7baIssue Tracking, Patch, Vendor Advisory
https://github.com/latchset/jwcrypto/issues/65Issue Tracking, Vendor Advisory
https://github.com/latchset/jwcrypto/pull/66Issue Tracking, Patch
https://github.com/latchset/jwcrypto/releases/tag/v0.3.2Patch, Vendor Advisory

Timeline

Published: Sep 1, 2016
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2016

CVE-2016-62997.8The scm plug-in in mock might allow attackers to bypass the intended chroot protection mechanism and gain root privileges via a crafted spec CVE-2016-63017.5The recv_and_process_client_pkt function in networking/ntpd.c in busybox allows remote attackers to cause a denial of service (CPU and bandw CVE-2016-63027.5The tls_decrypt_ticket function in ssl/t1_lib.c in OpenSSL before 1.1.0 does not consider the HMAC size during validation of the ticket leng CVE-2016-63039.8Integer overflow in the MDC2_Update function in crypto/mdc2/mdc2dgst.c in OpenSSL before 1.1.0 allows remote attackers to cause a denial of CVE-2016-63047.5Multiple memory leaks in t1_lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before 1.1.0a allow remote attackers to cause a d CVE-2016-63057.5The ssl3_read_bytes function in record/rec_layer_s3.c in OpenSSL 1.1.0 before 1.1.0a allows remote attackers to cause a denial of service (i CVE-2016-63065.9The certificate parser in OpenSSL before 1.0.1u and 1.0.2 before 1.0.2i might allow remote attackers to cause a denial of service (out-of-bo CVE-2016-63075.9The state-machine implementation in OpenSSL 1.1.0 before 1.1.0a allocates memory before checking for an excessive length, which might allow CVE-2016-63085.9statem/statem_dtls.c in the DTLS implementation in OpenSSL 1.1.0 before 1.1.0a allocates memory before checking for an excessive length, whi CVE-2016-63099.8statem/statem.c in OpenSSL 1.1.0a does not consider memory-block movement after a realloc call, which allows remote attackers to cause a den CVE-2016-63105.5oVirt Engine discloses the ENGINE_HTTPS_PKI_TRUST_STORE_PASSWORD in /var/log/ovirt-engine/engine.log file in RHEV before 4.0.CVE-2016-63115.3Get requests in JBoss Enterprise Application Platform (EAP) 7 disclose internal IP addresses to remote attackers.