Lucene search
PRIOn knowledge basePRION:CVE-2023-49083HistoryNov 29, 2023 - 7:15 p.m.
Null pointer dereference
2023-11-2919:15:00
PRIOn knowledge base
www.prio-n.com
15
cryptography package
null-pointer dereference
segfault
denial of service
pkcs7 blob
system availability
stability
vulnerability patch
cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Calling load_pem_pkcs7_certificates or load_der_pkcs7_certificates could lead to a NULL-pointer dereference and segfault. Exploitation of this vulnerability poses a serious risk of Denial of Service (DoS) for any application attempting to deserialize a PKCS7 blob/certificate. The consequences extend to potential disruptions in system availability and stability. This vulnerability has been patched in version 41.0.6.
| CPE | Name | Operator | Version |
|---|---|---|---|
| cryptography | ge | 3.1 | |
| cryptography | lt | 41.0.6 |
Related
nessus
nessus
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : python-cryptography (SUSE-SU-2023:4842-1)
2023-12-15 00:00:00
Fedora 40 : python-cryptography (2024-9d2de2b051)
2024-04-29 00:00:00
Oracle Linux 7 : python-cryptography (ELSA-2024-19480)
2024-03-21 00:00:00
cbl_mariner
cbl_mariner
oraclelinux
oraclelinux
python-cryptography security update
2024-03-20 00:00:00
python3.11-cryptography security update
2024-05-02 00:00:00
python3.11-cryptography security update
2024-05-23 00:00:00
redhatcve
redhatcve
CVE-2023-49083
2023-12-20 11:10:52
ubuntucve
ubuntucve
CVE-2023-49083
2023-12-04 00:00:00
cve
cve
CVE-2023-49083
2023-11-29 19:15:07
almalinux
almalinux
Moderate: python3.11-cryptography security update
2024-05-22 00:00:00
Moderate: python3.11-cryptography security update
2024-04-30 00:00:00
alpinelinux
alpinelinux
CVE-2023-49083
2023-11-29 19:15:07
openvas
openvas
openSUSE: Security Advisory for python3 (SUSE-SU-2023:4843-1)
2024-03-04 00:00:00
Fedora: Security Advisory for python-cryptography (FEDORA-2024-91f5df4002)
2024-02-17 00:00:00
nvd
nvd
CVE-2023-49083
2023-11-29 19:15:07
redos
redos
ROS-20240402-16
2024-04-02 00:00:00
ROS-20240409-06
2024-04-09 00:00:00
osv
osv
CVE-2023-49083
2023-11-29 19:15:07
Moderate: python3.11-cryptography security update
2024-05-10 14:32:42
Moderate: python3.11-cryptography security update
2024-05-22 00:00:00
cvelist
cvelist
redhat
redhat
ibm
ibm
veracode
veracode
Denial Of Service (DoS)
2023-11-29 09:29:57
rocky
rocky
python3.11-cryptography security update
2024-05-10 14:32:42
cgr
cgr
CVE-2023-49083 vulnerabilities
2024-05-19 03:07:16
fedora
fedora
[SECURITY] Fedora 39 Update: python-cryptography-41.0.7-1.fc39
2024-02-17 00:57:57
debiancve
debiancve
CVE-2023-49083
2023-11-29 19:15:07
github
github
cryptography vulnerable to NULL-dereference when loading PKCS7 certificates
2023-11-28 20:46:46
wolfi
wolfi
CVE-2023-49083 vulnerabilities
2024-07-05 21:08:40
ubuntu
ubuntu
python-cryptography vulnerabilities
2023-12-06 00:00:00
cloudfoundry
cloudfoundry
USN-6539-1: python-cryptography vulnerabilities | Cloud Foundry
2024-04-04 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2023-4.0-0533
2023-12-23 00:00:00
Critical Photon OS Security Update - PHSA-2024-5.0-0187
2024-01-09 00:00:00
gentoo
gentoo
cryptography: Multiple Vulnerabilities
2024-07-01 00:00:00
hp
hp
HP ThinPro 8.1 SP 2 Security Updates
2024-04-12 00:00:00
HP ThinPro 8.0 SP 8 Security Updates
2024-03-01 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - April 2024
2024-04-16 00:00:00