PT-2026-2125 · Rsa+1 · Rsa+1

Invd · Publicado 2026-01-06 · Atualizado 2026-03-12 · CVE-2026-21895

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions rsa crate versions prior to 0.9.10

Description The rsa crate, an RSA implementation written in rust, experiences a panic instead of returning an error during the creation of an RSA private key from its components when one of the prime numbers is equal to 1. This issue occurs in versions prior to 0.9.10.

Recommendations Update to rsa crate version 0.9.10 or later.

Exploit

Correção

Enumeração de Fraquezas

CWE-703

Identificadores relacionados

CVE-2026-21895

GHSA-9C48-W39G-HM26

OPENSUSE-SU-2026:10105-1

Produtos afetados

Debian

Rsa

Referências · 17

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/21xxx/CVE-2026-21895.json · Exploit
• https://github.com/RustCrypto/RSA/commit/2926c91bef7cb14a7ccd42220a698cf4b1b692f7 · Correção
• https://github.com/RustCrypto/RSA/security/advisories/GHSA-9c48-w39g-hm26 · Aviso do Fabricante
• https://github.com/RustCrypto/RSA · Nota
• https://osv.dev/vulnerability/GHSA-9c48-w39g-hm26 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2026-21895 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2026-21895 · Aviso do Fabricante
• https://t.me/CVEtracker/41721 · Publicação no Telegram
• https://t.me/cveNotify/155345 · Publicação no Telegram
• https://ubuntu.com/security/CVE-2026-21895 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-21895 · Aviso do Fabricante
• https://osv.dev/vulnerability/openSUSE-SU-2026:10105-1 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2026-21895 · Nota de Segurança
• https://cve.org/CVERecord?id=CVE-2026-21895 · Nota de Segurança
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-21895 · Aviso do Fabricante