Lucene search
OracleLinuxELSA-2023-7096HistoryNov 17, 2023 - 12:00 a.m.
python-cryptography security update
2023-11-1700:00:00
linux.oracle.com
10
security update
cve-2023-23931
python-cryptography
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
6.5 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
29.1%
[3.2.1-6]
- Fix CVE-2023-23931: Don’t allow update_into to mutate immutable objects, resolves rhbz#2172404
Related
nessus
nessus
CentOS 9 : python-cryptography-36.0.1-3.el9
2024-02-29 00:00:00
EulerOS Virtualization 2.11.1 : python-cryptography (EulerOS-SA-2023-2740)
2024-01-16 00:00:00
EulerOS Virtualization 3.0.6.0 : python-cryptography (EulerOS-SA-2024-1700)
2024-05-17 00:00:00
fedora
fedora
[SECURITY] Fedora 36 Update: python-cryptography-36.0.0-4.fc36
2023-03-10 01:38:26
[SECURITY] Fedora 37 Update: python-cryptography-37.0.2-5.fc37
2023-02-27 01:49:10
[SECURITY] Fedora 38 Update: python-cryptography-37.0.2-8.fc38
2023-03-11 03:35:22
openvas
openvas
Fedora: Security Advisory for python-cryptography (FEDORA-2023-749dd47c79)
2023-03-12 00:00:00
Fedora: Security Advisory for python-cryptography (FEDORA-2023-672f668f51)
2023-03-11 00:00:00
osv
osv
CVE-2023-23931
2023-02-07 21:15:09
Cipher.update_into can corrupt memory if passed an immutable python object as the outbuf
2023-02-07 20:54:10
python-cryptography - regression update
2023-02-27 00:00:00
debiancve
debiancve
CVE-2023-23931
2023-02-07 21:15:09
debian
debian
[SECURITY] [DLA 3331-1] python-cryptography security update
2023-02-22 20:00:30
[SECURITY] [DLA 3331-2] python-cryptography security update
2023-02-27 07:39:06
cbl_mariner
cbl_mariner
CVE-2023-23931 affecting package python-cryptography for versions less than 3.3.2-5
2024-03-19 17:21:46
CVE-2023-23931 affecting package python-cryptography 3.3.2-1
2023-03-02 04:18:32
ibm
ibm
freebsd
freebsd
py-cryptography -- allows programmers to misuse an API
2023-02-07 00:00:00
veracode
veracode
Memory Corruption
2023-02-08 08:28:21
mageia
mageia
Updated python-cryptography packages fix security vulnerability
2023-02-27 23:27:16
github
github
redhat
redhat
(RHSA-2023:6615) Moderate: python-cryptography security update
2023-11-07 06:10:12
(RHSA-2023:7096) Moderate: python-cryptography security update
2023-11-14 08:45:19
cve
cve
CVE-2023-23931
2023-02-07 21:15:09
redhatcve
redhatcve
CVE-2023-23931
2023-02-20 14:29:26
ubuntucve
ubuntucve
CVE-2023-23931
2023-02-07 00:00:00
cvelist
cvelist
CVE-2023-23931 Cipher.update_into can corrupt memory in pyca cryptography
2023-02-07 20:54:03
prion
prion
Design/Logic Flaw
2023-02-07 21:15:00
oraclelinux
oraclelinux
python-cryptography security update
2023-11-11 00:00:00
python39:3.9 and python39-devel:3.9 security update
2024-05-24 00:00:00
almalinux
almalinux
Moderate: python-cryptography security update
2023-11-07 00:00:00
Moderate: python-cryptography security update
2023-11-14 00:00:00
Moderate: python39:3.9 and python39-devel:3.9 security update
2024-05-22 00:00:00
nvd
nvd
CVE-2023-23931
2023-02-07 21:15:09
alpinelinux
alpinelinux
CVE-2023-23931
2023-02-07 21:15:09
cloudfoundry
cloudfoundry
USN-6539-1: python-cryptography vulnerabilities | Cloud Foundry
2024-04-04 00:00:00
ubuntu
ubuntu
python-cryptography vulnerabilities
2023-12-06 00:00:00
photon
photon
Moderate Photon OS Security Update - PHSA-2023-4.0-0405
2023-06-08 00:00:00
Critical Photon OS Security Update - PHSA-2023-3.0-0681
2023-11-04 00:00:00
Critical Photon OS Security Update - PHSA-2024-5.0-0187
2024-01-09 00:00:00
redos
redos
ROS-20230620-06
2023-06-20 00:00:00
gentoo
gentoo
cryptography: Multiple Vulnerabilities
2024-07-01 00:00:00
rocky
rocky
python39:3.9 and python39-devel:3.9 security update
2024-06-14 13:59:30
hp
hp
HP ThinPro 8.1 SP 2 Security Updates
2024-04-12 00:00:00
HP ThinPro 8.0 SP 8 Security Updates
2024-03-01 00:00:00
ics
ics
Siemens SCALANCE XCM-/XRM-300
2024-02-15 12:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - January 2024
2024-01-16 00:00:00
Oracle Critical Patch Update Advisory - October 2023
2023-10-17 00:00:00
Oracle Critical Patch Update Advisory - July 2023
2023-07-18 00:00:00
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
6.5 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
29.1%
Related for ELSA-2023-7096