CVE-2016-1494

Name of the Vulnerable Software and Affected Versions Python-RSA versions prior to 3.3

Description The issue allows attackers to spoof signatures with a small public exponent via crafted signature padding, also known as a BERserk attack. This affects the verify function in the RSA package for Python.

Recommendations For versions prior to 3.3, update to version 3.3 or later to resolve the issue. As a temporary workaround, consider implementing additional signature verification checks to minimize the risk of exploitation.