Lucene search
Alpine Linux Development TeamALPINE:CVE-2023-49083HistoryNov 29, 2023 - 7:15 p.m.
CVE-2023-49083
2023-11-2919:15:07
Alpine Linux Development Team
security.alpinelinux.org
11
cryptography package
null-pointer dereference
segfault
denial of service
pkcs7 blob
dos
system stability
system availability
patch 41.0.6
python
cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Calling load_pem_pkcs7_certificates or load_der_pkcs7_certificates could lead to a NULL-pointer dereference and segfault. Exploitation of this vulnerability poses a serious risk of Denial of Service (DoS) for any application attempting to deserialize a PKCS7 blob/certificate. The consequences extend to potential disruptions in system availability and stability. This vulnerability has been patched in version 41.0.6.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Alpine | 3.18-community | noarch | py3-cryptography | = 41.0.3-r0 | UNKNOWN |
Related
nessus
nessus
Fedora 40 : python-cryptography (2024-9d2de2b051)
2024-04-29 00:00:00
Oracle Linux 7 : python-cryptography (ELSA-2024-19480)
2024-03-21 00:00:00
redhatcve
redhatcve
CVE-2023-49083
2023-12-20 11:10:52
oraclelinux
oraclelinux
python-cryptography security update
2024-03-20 00:00:00
python3.11-cryptography security update
2024-05-02 00:00:00
python3.11-cryptography security update
2024-05-23 00:00:00
cbl_mariner
cbl_mariner
cve
cve
CVE-2023-49083
2023-11-29 19:15:07
ubuntucve
ubuntucve
CVE-2023-49083
2023-12-04 00:00:00
almalinux
almalinux
Moderate: python3.11-cryptography security update
2024-05-22 00:00:00
Moderate: python3.11-cryptography security update
2024-04-30 00:00:00
veracode
veracode
Denial Of Service (DoS)
2023-11-29 09:29:57
openvas
openvas
Fedora: Security Advisory for python-cryptography (FEDORA-2024-91f5df4002)
2024-02-17 00:00:00
openSUSE: Security Advisory for python3 (SUSE-SU-2023:4843-1)
2024-03-04 00:00:00
ibm
ibm
rocky
rocky
python3.11-cryptography security update
2024-05-10 14:32:42
nvd
nvd
CVE-2023-49083
2023-11-29 19:15:07
osv
osv
CVE-2023-49083
2023-11-29 19:15:07
Moderate: python3.11-cryptography security update
2024-05-10 14:32:42
Moderate: python3.11-cryptography security update
2024-05-22 00:00:00
redos
redos
ROS-20240402-16
2024-04-02 00:00:00
ROS-20240409-06
2024-04-09 00:00:00
prion
prion
Null pointer dereference
2023-11-29 19:15:00
cvelist
cvelist
redhat
redhat
cgr
cgr
CVE-2023-49083 vulnerabilities
2024-05-19 03:07:16
fedora
fedora
[SECURITY] Fedora 39 Update: python-cryptography-41.0.7-1.fc39
2024-02-17 00:57:57
debiancve
debiancve
CVE-2023-49083
2023-11-29 19:15:07
wolfi
wolfi
CVE-2023-49083 vulnerabilities
2024-07-05 15:46:04
github
github
cryptography vulnerable to NULL-dereference when loading PKCS7 certificates
2023-11-28 20:46:46
ubuntu
ubuntu
python-cryptography vulnerabilities
2023-12-06 00:00:00
cloudfoundry
cloudfoundry
USN-6539-1: python-cryptography vulnerabilities | Cloud Foundry
2024-04-04 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2023-4.0-0533
2023-12-23 00:00:00
Critical Photon OS Security Update - PHSA-2024-5.0-0187
2024-01-09 00:00:00
gentoo
gentoo
cryptography: Multiple Vulnerabilities
2024-07-01 00:00:00
hp
hp
HP ThinPro 8.1 SP 2 Security Updates
2024-04-12 00:00:00
HP ThinPro 8.0 SP 8 Security Updates
2024-03-01 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - April 2024
2024-04-16 00:00:00