python-cryptography vulnerabilities (openSUSE)
28 vulnerabilities.
-
python-cryptographyopenSUSE python-cryptography: Duplicate self-signed intermediates can cause exponential path-building 8.7 High -
python-cryptographyopenSUSE python-cryptography verifier accepts wildcard DNS names allowing escape from permittedSubtrees 6.9 Medium -
python-cryptographyopenSUSE cryptography: PKCS#7 EnvelopedData decryption exposes a Bleichenbacher oracle through distinguishable errors and timing 8.2 High -
python-cryptographyopenSUSE rust-openssl: Potential out-of-bounds write in `CipherCtxRef::cipher_update_inplace` for AES-KW-PAD ciphers 5.1 Medium -
python-cryptographyopenSUSE rust-openssl: Heap buffer overflow when encrypting with AES key-wrap-with-padding 5.1 Medium -
python-cryptographyopenSUSE rust-openssl: undefined behavior in X509Ref::ocsp_responders for certificates with non-UTF-8 OCSP URLs 8.7 High -
python-cryptographyopenSUSE rust-openssl: Deriver::derive and PkeyCtxRef::derive can overflow short buffers on OpenSSL 1.1.1 7.2 High -
python-cryptographyopenSUSE rust-openssl: Out-of-bounds read in PEM password callback when user callback returns an oversized length 1.7 Low -
python-cryptographyopenSUSE rust-openssl: Incorrect bounds assertion in aes key wrap 7.2 High -
python-cryptographyopenSUSE rust-openssl: MdCtxRef::digest_final() writes past caller buffer with no length check 8.1 High -
python-cryptographyopenSUSE rust-openssl: Unchecked callback-returned length in PSK and cookie generate trampolines can cause OpenSSL to leak adjacent memory to the network peer 8.3 High -
python-cryptographyopenSUSE cryptography has a buffer overflow if non-contiguous buffers were passed to APIs 6.9 Medium -
python-cryptographyopenSUSE cryptography has incomplete DNS name constraint enforcement on peer names 1.7 Low -
python-cryptographyopenSUSE cryptography Subgroup Attack Due to Missing Subgroup Validation for SECT Curves 8.2 High -
python-cryptographyopenSUSE Rust-openssl: rust-openssl use-after-free in `md::fetch` and `cipher::fetch` 3.7 Low -
python-cryptographyopenSUSE python-jose denial of service via compressed JWE content 5.3 Medium -
python-cryptographyopenSUSE python-jose algorithm confusion with OpenSSH ECDSA keys 6.5 Medium -
python-cryptographyopenSUSE cryptography NULL pointer deference with pkcs12.serialize_key_and_certificates when called with a non-matching certificate and private key and an hmac_hash override 7.5 High -
python-cryptographyopenSUSE cryptography vulnerable to NULL-dereference when loading PKCS7 certificates 5.9 Medium -
python-cryptographyopenSUSE cryptography mishandles SSH certificates 7.5 High -
python-cryptographyopenSUSE Parser contains an inefficient regular expression in sqlparse 5.5 Medium -
python-cryptographyopenSUSE Cipher.update_into can corrupt memory in pyca cryptography 4.8 Medium -
python-cryptographyopenSUSE X.509 Email Address Variable Length Buffer Overflow 7.5 High -
python-cryptographyopenSUSE X.509 Email Address 4-byte Buffer Overflow 7.5 High -
python-cryptographyopenSUSE PyCA Cryptography symmetrically encrypting large values can lead to integer overflow 9.1 Critical -
python-cryptographyopenSUSE RSA decryption vulnerable to Bleichenbacher timing vulnerability 5.9 Medium -
python-cryptographyopenSUSE CRLF injection in urllib3 6.5 Medium -
python-cryptographyopenSUSE PyCA Cryptography vulnerable to GCM tag forgery 7.5 High