Lucene search

K
redhatRedHatRHSA-2023:7096
HistoryNov 14, 2023 - 8:45 a.m.

(RHSA-2023:7096) Moderate: python-cryptography security update

2023-11-1408:45:19
access.redhat.com
23
python-cryptography
pyca's
cryptographic primitives
memory corruption
cve-2023-23931
red hat enterprise linux 8.9

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

AI Score

7.3

Confidence

High

EPSS

0.001

Percentile

33.2%

The python-cryptography packages contain a Python Cryptographic Authority’s (PyCA’s) cryptography library, which provides cryptographic primitives and recipes to Python developers.

Security Fix(es):

  • python-cryptography: memory corruption via immutable objects (CVE-2023-23931)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.9 Release Notes linked from the References section.

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

AI Score

7.3

Confidence

High

EPSS

0.001

Percentile

33.2%