python-cryptography project python-cryptography vulnerabilities and exploits

(subscribe to this query)

NA

A flaw was found in the python-cryptography package. This issue may allow a remote malicious user to decrypt captured messages in TLS servers that use RSA key exchanges, which may lead to exposure of confidential or sensitive data.

Redhat Ansible Automation Platform 2.0 Redhat Enterprise Linux 8.0 Redhat Enterprise Linux 9.0 Redhat Update Infrastructure 4 Python-cryptography Project Python-cryptography

NA

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Calling `load_pem_pkcs7_certificates` or `load_der_pkcs7_certificates` could lead to a NULL-pointer dereference and segfault. Exploitation of this vulnerability poses a serious...

Cryptography Project Cryptography

NA

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In affected versions `Cipher.update_into` would accept Python objects which implement the buffer protocol, but provide only immutable buffers. This would allow immutable object...

Cryptography Project Cryptography

6.4

CVSSv2

In the cryptography package prior to 3.3.2 for Python, certain sequences of update calls to symmetrically encrypt multi-GB values could result in an integer overflow and buffer overflow, as demonstrated by the Fernet class.

Cryptography Project Cryptography Fedoraproject Fedora 33 Oracle Communications Cloud Native Core Network Function Cloud Native Environment 1.10.0

2 Github repositories

4.3

CVSSv2

python-cryptography 3.2 is vulnerable to Bleichenbacher timing attacks in the RSA decryption API, via timed processing of valid PKCS#1 v1.5 ciphertext.

Python-cryptography Project Python-cryptography 3.2 Oracle Communications Cloud Native Core Network Function Cloud Native Environment 1.10.0

1 Github repository

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook