CVE-2020-26263

Name of the Vulnerable Software and Affected Versions tlslite-ng versions prior to 0.7.6 and 0.8.0-alpha39

Description The code that performs decryption and padding check in RSA PKCS#1 v1.5 decryption is data dependent, leaking information about the decrypted ciphertext. This affects all TLS servers that enable RSA key exchange and applications that use the RSA decryption API directly.

Recommendations For versions prior to 0.7.6, update to version 0.7.6 or later. For versions prior to 0.8.0-alpha39, update to version 0.8.0-alpha39 or later. As a temporary workaround, consider using different TLS implementations to minimize the risk of exploitation, as the patches depend on Python processing individual bytes in a side-channel free manner, which is known not to be the case.