python3-cryptography vulnerabilities (Red Hat)
68 vulnerabilities.
-
python3-cryptographyRed Hat DTLS Retransmits Handshake Messages From a Stale Buffer Offset 8.2 High -
python3-cryptographyRed Hat AEAD Forgeries with Empty Ciphertext When Using EVP_Cipher() 9.1 Critical -
python3-cryptographyRed Hat Client-Side Memory Leak in OCSP Response Checking 7.5 High -
python3-cryptographyRed Hat python-cryptography: Duplicate self-signed intermediates can cause exponential path-building 8.7 High -
python3-cryptographyRed Hat python-cryptography verifier accepts wildcard DNS names allowing escape from permittedSubtrees 6.9 Medium -
python3-cryptographyRed Hat cryptography: PKCS#7 EnvelopedData decryption exposes a Bleichenbacher oracle through distinguishable errors and timing 8.2 High -
python3-cryptographyRed Hat Out-of-Bounds Read in CMS Password-Based Decryption 7.5 High -
python3-cryptographyRed Hat Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion 8.1 High -
python3-cryptographyRed Hat Heap Use-After-Free in the PKCS7_verify() Function 8.8 High -
python3-cryptographyRed Hat Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes 4.8 Medium -
python3-cryptographyRed Hat AES-OCB IV Ignored on EVP_Cipher() Path 7.5 High -
python3-cryptographyRed Hat Possible Out of Bounds Read in X509_VERIFY_PARAM_set1_email() 6.2 Medium -
python3-cryptographyRed Hat FFC-DH Peer Validation Uses Attacker-Supplied q 3.7 Low -
python3-cryptographyRed Hat Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate 5.3 Medium -
python3-cryptographyRed Hat Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt() 3.7 Low -
python3-cryptographyRed Hat NULL Pointer Dereference in CRMF EncryptedValue Decryption 5.9 Medium -
python3-cryptographyRed Hat Possible NULL Dereference in Password-Based CMS Decryption 5.9 Medium -
python3-cryptographyRed Hat NULL Dereference in Certificate Verification with OCSP Checking 7.5 High -
python3-cryptographyRed Hat NULL Pointer Dereference in QUIC Server Initial Packet Handling 7.5 High -
python3-cryptographyRed Hat Double-free When Checking OCSP Stapled Response 5.0 Medium -
python3-cryptographyRed Hat Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler 7.5 High -
python3-cryptographyRed Hat CMS AuthEnvelopedData Processing May Accept Forged Messages 9.1 Critical -
python3-cryptographyRed Hat PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys 7.4 High -
python3-cryptographyRed Hat Heap Buffer Over-read in ASN.1 Content Parsing 7.5 High -
python3-cryptographyRed Hat urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API 8.9 High -
python3-cryptographyRed Hat Requests `Session` object does not verify requests after making first request with verify=False 5.6 Medium -
python3-cryptographyRed Hat Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter 5.4 Medium -
python3-cryptographyRed Hat Denial of service when trying to parse malformed POST requests in aiohttp 7.5 High -
python3-cryptographyRed Hat social-auth-app-django Improper Handling of Case Sensitivity vulnerability 4.9 Medium -
python3-cryptographyRed Hat aiohttp vulnerable to XSS on index pages for static file handling 6.1 Medium -
python3-cryptographyRed Hat HTTP Request Smuggling in benoitc/gunicorn 7.5 High -
python3-cryptographyRed Hat Passing a heavily nested list to sqlparse.parse() leads to a Denial of Service due to RecursionError. 7.5 High -
python3-cryptographyRed Hat Regular expression denial of service in Pydantic < 2.4.0 5.9 Medium -
python3-cryptographyRed Hat Denial of Service via Quadratic Complexity in kjd/idna 6.2 Medium -
python3-cryptographyRed Hat Pillow buffer overflow vulnerability 6.7 Medium -
python3-cryptographyRed Hat HTTP/2 CONTINUATION flood in net/http 7.5 High -
python3-cryptographyRed Hat Black vulnerable to Regular Expression Denial of Service (ReDoS) 5.3 Medium -
python3-cryptographyRed Hat Proxy-Authorization header kept across hosts in follow-redirects 6.5 Medium -
python3-cryptographyRed Hat Memory exhaustion in multipart form parsing in net/textproto and net/http 6.5 Medium -
python3-cryptographyRed Hat Verify panics on certificates with an unknown public key algorithm in crypto/x509 5.9 Medium -
python3-cryptographyRed Hat Regular expression denial-of-service in Django 5.3 Medium -
python3-cryptographyRed Hat cryptography NULL pointer deference with pkcs12.serialize_key_and_certificates when called with a non-matching certificate and private key and an hmac_hash override 7.5 High -
python3-cryptographyRed Hat cryptography vulnerable to NULL-dereference when loading PKCS7 certificates 5.9 Medium -
python3-cryptographyRed Hat Mercurial configuration injectable in repo revision when installing via pip 5.5 Medium -
python3-cryptographyRed Hat Arbitrary Code Execution in Pillow 8.1 High -
python3-cryptographyRed Hat Platform: token exposed at importing project 6.3 Medium -
python3-cryptographyRed Hat Django has regular expression denial of service vulnerability in EmailValidator/URLValidator 7.5 High -
python3-cryptographyRed Hat Unintended leak of Proxy-Authorization header in requests 6.1 Medium -
python3-cryptographyRed Hat Cipher.update_into can corrupt memory in pyca cryptography 4.8 Medium -
python3-cryptographyRed Hat A flaw was found in Red Hat Satellite, which allows a privileged attacker to read OMAPI secrets... 5.5 Medium - Show olderLoading…