python-cryptography vulnerabilities (Red Hat)
183 vulnerabilities.
-
python-cryptographyRed Hat DTLS Retransmits Handshake Messages From a Stale Buffer Offset 8.2 High -
python-cryptographyRed Hat AEAD Forgeries with Empty Ciphertext When Using EVP_Cipher() 9.1 Critical -
python-cryptographyRed Hat Client-Side Memory Leak in OCSP Response Checking 7.5 High -
python-cryptographyRed Hat python-cryptography: Duplicate self-signed intermediates can cause exponential path-building 8.7 High -
python-cryptographyRed Hat python-cryptography verifier accepts wildcard DNS names allowing escape from permittedSubtrees 6.9 Medium -
python-cryptographyRed Hat cryptography: PKCS#7 EnvelopedData decryption exposes a Bleichenbacher oracle through distinguishable errors and timing 8.2 High -
python-cryptographyRed Hat Out-of-Bounds Read in CMS Password-Based Decryption 7.5 High -
python-cryptographyRed Hat Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion 8.1 High -
python-cryptographyRed Hat Heap Use-After-Free in the PKCS7_verify() Function 8.8 High -
python-cryptographyRed Hat Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes 4.8 Medium -
python-cryptographyRed Hat AES-OCB IV Ignored on EVP_Cipher() Path 7.5 High -
python-cryptographyRed Hat Possible Out of Bounds Read in X509_VERIFY_PARAM_set1_email() 6.2 Medium -
python-cryptographyRed Hat FFC-DH Peer Validation Uses Attacker-Supplied q 3.7 Low -
python-cryptographyRed Hat Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate 5.3 Medium -
python-cryptographyRed Hat Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt() 3.7 Low -
python-cryptographyRed Hat NULL Pointer Dereference in CRMF EncryptedValue Decryption 5.9 Medium -
python-cryptographyRed Hat Possible NULL Dereference in Password-Based CMS Decryption 5.9 Medium -
python-cryptographyRed Hat NULL Dereference in Certificate Verification with OCSP Checking 7.5 High -
python-cryptographyRed Hat NULL Pointer Dereference in QUIC Server Initial Packet Handling 7.5 High -
python-cryptographyRed Hat Double-free When Checking OCSP Stapled Response 5.0 Medium -
python-cryptographyRed Hat Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler 7.5 High -
python-cryptographyRed Hat CMS AuthEnvelopedData Processing May Accept Forged Messages 9.1 Critical -
python-cryptographyRed Hat PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys 7.4 High -
python-cryptographyRed Hat Heap Buffer Over-read in ASN.1 Content Parsing 7.5 High -
python-cryptographyRed Hat urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API 8.9 High -
python-cryptographyRed Hat cryptography has a buffer overflow if non-contiguous buffers were passed to APIs 6.9 Medium -
python-cryptographyRed Hat cryptography has incomplete DNS name constraint enforcement on peer names 1.7 Low -
python-cryptographyRed Hat cryptography Subgroup Attack Due to Missing Subgroup Validation for SECT Curves 8.2 High -
python-cryptographyRed Hat Quadratic complexity in os.path.expandvars() with user-controlled template 1.8 Low -
python-cryptographyRed Hat ZIP64 End of Central Directory (EOCD) Locator record offset not checked 4.3 Medium -
python-cryptographyRed Hat Tarfile infinite loop during parsing with negative member offset 7.5 High -
python-cryptographyRed Hat HTMLParser quadratic complexity when processing malformed inputs 4.3 Medium -
python-cryptographyRed Hat Tarfile extracts filtered members when errorlevel=0 7.5 High -
python-cryptographyRed Hat Bypassing extraction filter to create symlinks to arbitrary targets outside extraction directory 7.5 High -
python-cryptographyRed Hat Extraction filter bypass for linking outside extraction directory 7.5 High -
python-cryptographyRed Hat Arbitrary writes via tarfile realpath overflow 9.4 Critical -
python-cryptographyRed Hat setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write 7.7 High -
python-cryptographyRed Hat Use-after-free in "unicode_escape" decoder with error handler 5.9 Medium -
python-cryptographyRed Hat URL parser allowed square brackets in domain names 6.3 Medium -
python-cryptographyRed Hat Improper validation of IPv6 and IPvFuture addresses 6.3 Medium -
python-cryptographyRed Hat Foreman: read-only access to entire db from templates 6.3 Medium -
python-cryptographyRed Hat Virtual environment (venv) activation scripts don't quote paths 5.3 Medium -
python-cryptographyRed Hat Memory leak 7.2 High -
python-cryptographyRed Hat Puppet-pulpcore: an authentication bypass vulnerability exists in pulpcore 9.8 Critical -
python-cryptographyRed Hat Puppet-foreman: an authentication bypass vulnerability exists in foreman 9.8 Critical -
python-cryptographyRed Hat Regular-expression DoS when parsing TarFile headers 7.5 High -
python-cryptographyRed Hat Infinite loop when iterating over zip archive entry names from zipfile.Path 8.7 High -
python-cryptographyRed Hat Django SQL injection vulnerability 7.3 High -
python-cryptographyRed Hat Django vulnerable to denial-of-service attack 7.5 High -
python-cryptographyRed Hat Django vulnerable to a denial-of-service attack 7.5 High - Show olderLoading…