CVE-2016-1494 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2016-1494 Interim 1 46 2025-04-08T23:51:38Z current 2021-05-30T13:37:53Z 2025-04-08T23:51:38Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2016-1494 The verify function in the RSA package for Python (Python-RSA) before 3.3 allows attackers to spoof signatures with a small public exponent via crafted signature padding, aka a BERserk attack. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2016-January/001796.html E-Mail link for SUSE-SU-2016:0107-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings Image SLES12-SP4-EC2-HVM-BYOS Image SLES12-SP4-SAP-EC2-HVM Image SLES12-SP4-SAP-EC2-HVM-BYOS Image SLES12-SP5-EC2-BYOS Image SLES12-SP5-EC2-ECS-On-Demand Image SLES12-SP5-EC2-On-Demand Image SLES12-SP5-EC2-SAP-BYOS Image SLES12-SP5-EC2-SAP-On-Demand Image SLES12-SP5-GCE-SAP-BYOS Image SLES12-SP5-GCE-SAP-On-Demand SUSE CaaS Platform 4.0 SUSE Enterprise Storage 6 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Module for Public Cloud 15 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Module for Public Cloud 15 SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Server Business Critical Linux 15 SP1 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Module for Public Cloud 15 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Manager Proxy 4.0 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Manager Retail Branch Server 4.0 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Manager Server 4.0 SUSE Linux Enterprise Module for Basesystem 15 SP2 python-rsa python-rsa-3.1.4-11.1 python3-rsa python-rsa-3.1.4-11.1 as a component of Image SLES12-SP4-EC2-HVM-BYOS python-rsa-3.1.4-11.1 as a component of Image SLES12-SP4-SAP-EC2-HVM python-rsa-3.1.4-11.1 as a component of Image SLES12-SP4-SAP-EC2-HVM-BYOS python-rsa-3.1.4-11.1 as a component of Image SLES12-SP5-EC2-BYOS python-rsa-3.1.4-11.1 as a component of Image SLES12-SP5-EC2-ECS-On-Demand python-rsa-3.1.4-11.1 as a component of Image SLES12-SP5-EC2-On-Demand python-rsa-3.1.4-11.1 as a component of Image SLES12-SP5-EC2-SAP-BYOS python-rsa-3.1.4-11.1 as a component of Image SLES12-SP5-EC2-SAP-On-Demand python-rsa-3.1.4-11.1 as a component of Image SLES12-SP5-GCE-SAP-BYOS python-rsa-3.1.4-11.1 as a component of Image SLES12-SP5-GCE-SAP-On-Demand python-rsa-3.1.4-11.1 as a component of SUSE Linux Enterprise Module for Public Cloud 12 python3-rsa as a component of SUSE CaaS Platform 4.0 python-rsa as a component of SUSE CaaS Platform 4.0 python-rsa as a component of SUSE Enterprise Storage 6 python3-rsa as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS python-rsa as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS python3-rsa as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 python-rsa as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 python3-rsa as a component of SUSE Linux Enterprise Module for Public Cloud 15 python-rsa as a component of SUSE Linux Enterprise Module for Public Cloud 15 python3-rsa as a component of SUSE Linux Enterprise Server 15 SP1-LTSS python-rsa as a component of SUSE Linux Enterprise Server 15 SP1-LTSS python-rsa as a component of SUSE Linux Enterprise Server Business Critical Linux 15 SP1 python3-rsa as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 python-rsa as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 python-rsa as a component of SUSE Manager Proxy 4.0 python-rsa as a component of SUSE Manager Retail Branch Server 4.0 python-rsa as a component of SUSE Manager Server 4.0 The verify function in the RSA package for Python (Python-RSA) before 3.3 allows attackers to spoof signatures with a small public exponent via crafted signature padding, aka a BERserk attack. CVE-2016-1494 Image SLES12-SP4-EC2-HVM-BYOS:python-rsa-3.1.4-11.1 Image SLES12-SP4-SAP-EC2-HVM:python-rsa-3.1.4-11.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:python-rsa-3.1.4-11.1 Image SLES12-SP5-EC2-BYOS:python-rsa-3.1.4-11.1 Image SLES12-SP5-EC2-ECS-On-Demand:python-rsa-3.1.4-11.1 Image SLES12-SP5-EC2-On-Demand:python-rsa-3.1.4-11.1 Image SLES12-SP5-EC2-SAP-BYOS:python-rsa-3.1.4-11.1 Image SLES12-SP5-EC2-SAP-On-Demand:python-rsa-3.1.4-11.1 Image SLES12-SP5-GCE-SAP-BYOS:python-rsa-3.1.4-11.1 Image SLES12-SP5-GCE-SAP-On-Demand:python-rsa-3.1.4-11.1 SUSE Linux Enterprise Module for Public Cloud 12:python-rsa-3.1.4-11.1 SUSE CaaS Platform 4.0:python-rsa SUSE CaaS Platform 4.0:python3-rsa SUSE Enterprise Storage 6:python-rsa SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:python-rsa SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:python3-rsa SUSE Linux Enterprise Module for Basesystem 15 SP2:python-rsa SUSE Linux Enterprise Module for Basesystem 15 SP2:python3-rsa SUSE Linux Enterprise Module for Public Cloud 15:python-rsa SUSE Linux Enterprise Module for Public Cloud 15:python3-rsa SUSE Linux Enterprise Server 15 SP1-LTSS:python-rsa SUSE Linux Enterprise Server 15 SP1-LTSS:python3-rsa SUSE Linux Enterprise Server Business Critical Linux 15 SP1:python-rsa SUSE Linux Enterprise Server for SAP Applications 15 SP1:python-rsa SUSE Linux Enterprise Server for SAP Applications 15 SP1:python3-rsa SUSE Manager Proxy 4.0:python-rsa SUSE Manager Retail Branch Server 4.0:python-rsa SUSE Manager Server 4.0:python-rsa moderate 5.8 AV:N/AC:M/Au:N/C:P/I:P/A:N 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N