5.9
Moyenne
CVE-2023-49083 cryptography is a package designed to expose cryptographic primitives and recipes to Python developers
Description
cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Calling `load_pem_pkcs7_certificates` or `load_der_pkcs7_certificates` could lead to a NULL-pointer dereference and segfault. Exploitation of this vulnerability poses a serious risk of Denial of Service (DoS) for any application attempting to deserialize a PKCS7 blob/certificate. The consequences extend to potential disruptions in system availability and stability. This vulnerability has been patched in version 41.0.6.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| cryptography 3.1 | 3.1 → < 41.0.6 | 41.0.6 |
Références
- github.com github.com
- github.com github.com
- github.com github.com
- lists.fedoraproject.org lists.fedoraproject.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de cryptography
Les 9 CVE de cryptography →
CVE-2026-69249
python-cryptography is a package designed to expose cryptographic primitives and recipes to Python developers
8.7
Élevée
CVE-2026-69248
cryptography is a package designed to expose cryptographic primitives and recipes to Python developers
6.9
Moyenne
CVE-2026-69247
cryptography is a package designed to expose cryptographic primitives and recipes to Python developers
8.2
Élevée
CVE-2026-39892
cryptography has a buffer overflow if non-contiguous buffers were passed to APIs
6.9
Moyenne