CVE-2020-26263

tlslite-ng is an open source python library that implements SSL and TLS cryptographic protocols. In tlslite-ng before versions 0.7.6 and 0.8.0-alpha39, the code that performs decryption and padding check in RSA PKCS#1 v1.5 decryption is data dependant. In particular, the code has multiple ways in which it leaks information about the decrypted ciphertext. It aborts as soon as the plaintext doesn't start with 0x00, 0x02. All TLS servers that enable RSA key exchange as well as applications that use the RSA decryption API directly are vulnerable. This is patched in versions 0.7.6 and 0.8.0-alpha39. Note: the patches depend on Python processing the individual bytes in side-channel free manner, this is known to not the case (see reference). As such, users that require side-channel resistance are recommended to use different TLS implementations, as stated in the security policy of tlslite-ng.

• CWE-326

• https://github.com/tlsfuzzer/tlslite-ng/commit/c28d6d387bba59d8bd5cb3ba15edc42edf54b368Patch, Third Party Advisory
• https://github.com/tlsfuzzer/tlslite-ng/pull/438Patch, Third Party Advisory
• https://github.com/tlsfuzzer/tlslite-ng/pull/439Patch, Third Party Advisory
• https://github.com/tlsfuzzer/tlslite-ng/security/advisories/GHSA-wvcv-832q-fjg7Exploit, Patch, Third Party Advisory
• https://pypi.org/project/tlslite-ng/Product, Third Party Advisory
• https://securitypitfalls.wordpress.com/2018/08/03/constant-time-compare-in-python/Exploit, Third Party Advisory
• https://github.com/tlsfuzzer/tlslite-ng/commit/c28d6d387bba59d8bd5cb3ba15edc42edf54b368Patch, Third Party Advisory
• https://github.com/tlsfuzzer/tlslite-ng/pull/438Patch, Third Party Advisory
• https://github.com/tlsfuzzer/tlslite-ng/pull/439Patch, Third Party Advisory
• https://github.com/tlsfuzzer/tlslite-ng/security/advisories/GHSA-wvcv-832q-fjg7Exploit, Patch, Third Party Advisory
• https://pypi.org/project/tlslite-ng/Product, Third Party Advisory
• https://securitypitfalls.wordpress.com/2018/08/03/constant-time-compare-in-python/Exploit, Third Party Advisory

Published

Dec 21, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-26258XStream is a Java library to serialize objects to XML and ba…7.7
• CVE-2020-26259XStream is a Java library to serialize objects to XML and ba…6.8
• CVE-2020-2626Vulnerability in the Enterprise Manager Base Platform produc…6
• CVE-2020-26260BookStack is a platform for storing and organising informati…6.4
• CVE-2020-26261jupyterhub-systemdspawner enables JupyterHub to spawn single…7.9
• CVE-2020-26262Coturn is free open source implementation of TURN and STUN S…7.2
• CVE-2020-26264Go Ethereum, or "Geth", is the official Golang implementatio…6.5
• CVE-2020-26265Go Ethereum, or "Geth", is the official Golang implementatio…5.3
• CVE-2020-26266In affected versions of TensorFlow under certain cases a sav…5.3
• CVE-2020-26267In affected versions of TensorFlow the tf.raw_ops.DataFormat…7.8
• CVE-2020-26268In affected versions of TensorFlow the tf.raw_ops.ImmutableC…4.4
• CVE-2020-26269In TensorFlow release candidate versions 2.4.0rc*, the gener…7.5