CVE-2023-50782

A flaw was found in the python-cryptography package. This issue may allow a remote attacker to decrypt captured messages in TLS servers that use RSA key exchanges, which may lead to exposure of confidential or sensitive data.

A flaw was found in the python-cryptography package. This issue may allow a remote attacker to decrypt captured messages in TLS servers that use RSA key exchanges, which may lead to exposure of confidential or sensitive data.

A flaw was found in the python-cryptography package. This issue may allow a remote attacker to decrypt captured messages in TLS servers that use RSA key exchanges, which may lead to exposure of confidential or sensitive data.

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers.

Security Fix(es):

A flaw was found in the python-cryptography package. This issue may allow a remote attacker to decrypt captured messages in TLS servers that use RSA key exchanges, which may lead to exposure of confidential or sensitive data.(CVE-2023-50782)

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers.

Security Fix(es):

A flaw was found in the python-cryptography package. This issue may allow a remote attacker to decrypt captured messages in TLS servers that use RSA key exchanges, which may lead to exposure of confidential or sensitive data.(CVE-2023-50782)

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers.

Security Fix(es):

A flaw was found in the python-cryptography package. This issue may allow a remote attacker to decrypt captured messages in TLS servers that use RSA key exchanges, which may lead to exposure of confidential or sensitive data.(CVE-2023-50782)

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers.

Security Fix(es):

A flaw was found in the python-cryptography package. This issue may allow a remote attacker to decrypt captured messages in TLS servers that use RSA key exchanges, which may lead to exposure of confidential or sensitive data.(CVE-2023-50782)

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers.

Security Fix(es):

A flaw was found in the python-cryptography package. This issue may allow a remote attacker to decrypt captured messages in TLS servers that use RSA key exchanges, which may lead to exposure of confidential or sensitive data.(CVE-2023-50782)

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers.

Security Fix(es):

A flaw was found in the python-cryptography package. This issue may allow a remote attacker to decrypt captured messages in TLS servers that use RSA key exchanges, which may lead to exposure of confidential or sensitive data.(CVE-2023-50782)

A flaw was found in the python-cryptography package. This issue may allow a remote attacker to decrypt captured messages in TLS servers that use RSA key exchanges, which may lead to exposure of confidential or sensitive data.

Root has patched CVE-2023-50782 in the cryptography package for Root:PyPI. Multiple fixed versions available.

A flaw was found in the python-cryptography package. This issue may allow a remote attacker to decrypt captured messages in TLS servers that use RSA key exchanges, which may lead to exposure of confidential or sensitive data.

TuxCare rebuilt cryptography to address 2 CVEs. Fixed in 41.0.7.post1+tuxcare.

TuxCare rebuilt cryptography to address 2 CVEs. Fixed in 3.4.8.post1+tuxcare.

• SECURITY UPDATE: Bleichenbacher/Marvin timing oracle in RSA PKCS#1 v1.5 decryption. Distinguishing a padding failure from a successful decryption, by error or by plaintext length, lets an attacker with chosen ciphertexts recover the plaintext of an intercepted message. This is the incomplete-fix follow-up to CVE-2020-25659.
  • debian/patches/CVE-2023-50782.patch: expose Cryptography_HAS_IMPLICIT_RSA_REJECTION from the linked OpenSSL headers in src/_cffi_src/openssl/rsa.py, and skip the PKCS1v15 padding-error assertion when that OpenSSL implicitly rejects invalid padding, in tests/hazmat/primitives/test_rsa.py.
  • The behaviour that closes the oracle comes from OpenSSL implicit rejection (LP: #2054090); built against an OpenSSL without it the constant compiles as 0 and this package behaves as before.
  • CVE-2023-50782
• Build fix: call email.utils.parseaddr with strict=False in src/cryptography/x509/general_name.py. The ELS python2.7 and python3.6 carry CVE-2023-27043.patch, whose strict parser guards on isinstance(addr, str); on Python 2 that is bytes, so every unicode argument yields ('', '') and RFC822Name rejects valid addresses, which breaks collection of the package test suite.
  • debian/patches/fix-parseaddr-call.patch: same workaround the centos7els branch of this package already carries.

Cryptography vulnerable to NULL-dereference when loading PKCS7 certificates. (CVE-2023-49083) Python-cryptography: bleichenbacher timing oracle attack against rsa decryption - incomplete fix for cve-2020-25659. (CVE-2023-50782) Cryptography NULL pointer deference with pkcs12.serialize_key_and_certificates when called with a non-matching certificate and private key and an hmac_hash override. (CVE-2024-26130)

These are all security issues fixed in the libopenssl-3-devel-3.1.4-15.1 package on the GA media of openSUSE Tumbleweed.

This update for openssl-1_1 fixes the following issues:

• CVE-2023-50782: Implicit rejection in PKCS#1 v1.5 (bsc#1220262)

This update for openssl-1_1 fixes the following issues:

• CVE-2023-50782: Implicit rejection in PKCS#1 v1.5 (bsc#1220262)

This update for openssl-3 fixes the following issues:

• CVE-2023-50782: Implicit rejection in PKCS#1 v1.5 (bsc#1220262)
• CVE-2024-41996: Avoid expensive public key validation for known safe-prime groups (DHEATATTACK) (bsc#1230698)

This update for openssl-3 fixes the following issues:

• CVE-2023-50782: Implicit rejection in PKCS#1 v1.5 (bsc#1220262)
• CVE-2024-41996: Avoid expensive public key validation for known safe-prime groups (DHEATATTACK) (bsc#1230698)

This update for openssl-1_1 fixes the following issues:

• CVE-2023-50782: Implicit rejection in PKCS#1 v1.5 (bsc#1220262)

This update for openssl-1_1 fixes the following issues:

• CVE-2023-50782: Implicit rejection in PKCS#1 v1.5 (bsc#1220262)

This update for openssl-1_1 fixes the following issues:

Security fixes:

• CVE-2023-50782: Implicit rejection in PKCS#1 v1.5 (bsc#1220262)

Other fixes:

• FIPS: AES GCM external IV implementation (bsc#1228618)
• FIPS: Mark PBKDF2 and HKDF HMAC input keys with size >= 112 bits as approved in the SLI. (bsc#1228623)
• FIPS: Enforce KDF in FIPS style (bsc#1224270)
• FIPS: Mark HKDF and TLSv1.3 KDF as approved in the SLI (bsc#1228619)
• FIPS: The X9.31 scheme is not approved for RSA signature operations in FIPS 186-5. (bsc#1224269)
• FIPS: Differentiate the PSS length requirements (bsc#1224275)
• FIPS: Mark sigGen and sigVer primitives as non-approved (bsc#1224272)
• FIPS: Disable PKCSv1.5 and shake in FIPS mode (bsc#1224271)
• FIPS: Mark SHA1 as non-approved in the SLI (bsc#1224266)
• FIPS: DH FIPS selftest and safe prime group (bsc#1224264)
• FIPS: Remove not needed FIPS DRBG files (bsc#1224268)
• FIPS: Add Pair-wise Consistency Test when generating DH key (bsc#1224265)
• FIPS: Disallow non-approved KDF types (bsc#1224267)
• FIPS: Disallow RSA sigVer with 1024 and ECDSA sigVer/keyVer P-192 (bsc#1224273)
• FIPS: DRBG component chaining (bsc#1224258)
• FIPS: Align CRNGT_BUFSIZ with Jitter RNG output size (bsc#1224260)

This update for openssl-3 fixes the following issues:

• CVE-2023-50782: Implicit rejection in PKCS#1 v1.5 (bsc#1220262)

This update for openssl-3 fixes the following issues:

• CVE-2024-41996: Fixed a denial of service in the Diffie-Hellman Key Agreement Protocol (bsc#1230698).
• CVE-2023-50782: Implicit rejection in PKCS#1 v1.5 (bsc#1220262)

This update for openssl-3 fixes the following issues:

• CVE-2023-50782: Implicit rejection in PKCS#1 v1.5 (bsc#1220262)

Hubert Kario discovered that python-cryptography incorrectly handled errors returned by the OpenSSL API when processing incorrect padding in RSA PKCS#1 v1.5. A remote attacker could possibly use this issue to expose confidential or sensitive information. (CVE-2023-50782)

It was discovered that python-cryptography incorrectly handled memory operations when processing mismatched PKCS#12 keys. A remote attacker could possibly use this issue to cause python-cryptography to crash, leading to a denial of service. This issue only affected Ubuntu 23.10. (CVE-2024-26130)

USN-6673-1 provided a security update for python-cryptography. This update provides the corresponding update for Ubuntu 16.04 LTS.

Original advisory details:

Hubert Kario discovered that python-cryptography incorrectly handled errors returned by the OpenSSL API when processing incorrect padding in RSA PKCS#1 v1.5. A remote attacker could possibly use this issue to expose confidential or sensitive information. (CVE-2023-50782)