Patchwire CVEs, their patch status, and feeds to follow them

CVE-2023-49083

Fixed in a distro release EPSS <1%CVSS 5.9

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Calling `load_pem_pkcs7_certificates` or `load_der_pkcs7_certificates` could lead to a NULL-pointer dereference and segfault. Exploitation of this vulnerability poses a serious risk of Denial of Service (DoS) for any application attempting to deserialize a PKCS7 blob/certificate. The consequences extend to potential disruptions in system availability and stability. This vulnerability has been patched in version 41.0.6.

Published 2023-11-29 · CVE record · OSV

Products: pyca cryptography

Fixed upstream

EcosystemPackageFixed in
PyPIcryptography41.0.6
PyPIcryptographyf09c261ca10a31fe41b1262306db7f8f1da0e48a

Distro releases

ReleasePackageFixed in
AlmaLinux 8python3-cryptography3.2.1-8.el8_10
AlmaLinux 8python3.11-cryptography37.0.2-6.el8
AlmaLinux 9python3-cryptography36.0.1-5.el9_6
AlmaLinux 9python3.11-cryptography37.0.2-6.el9
Chainguardmitmproxy12.2.1-r0
Chainguardpy3-cassandra-medusa0.19.1-r1
Chainguardpy3-cassandra-medusa-compat0.19.1-r1
Debian 11python-cryptography3.3.2-1+deb11u1
Debian 12python-cryptography38.0.4-3+deb12u1
Debian 13python-cryptography41.0.7-1
Debian 14python-cryptography41.0.7-1
Red Hat ansible automation platform 2.4automation-controller-venv-tower0:4.5.5-2.el8ap
Red Hat ansible automation platform 2.4automation-controller-venv-tower0:4.5.7-1.el9ap
Red Hat ansible automation platform 2.4automation-controller-venv-tower0:4.5.5-2.el9ap
Red Hat ansible automation platform 2.4automation-controller-venv-tower0:4.5.7-1.el8ap
Red Hat ansible automation platform 2.4automation-hub0:4.9.2-1.el8ap
Red Hat ansible automation platform 2.4automation-hub0:4.9.2-1.el9ap
Red Hat ansible automation platform 2.4python-aiohttp0:3.9.3-1.el9ap
Red Hat ansible automation platform 2.4python-aiohttp0:3.9.5-1.el9ap
Red Hat ansible automation platform 2.4python-aiohttp-debugsource0:3.9.5-1.el9ap
Red Hat ansible automation platform 2.4python-aiohttp-debugsource0:3.9.3-1.el9ap
Red Hat ansible automation platform 2.4python-black0:22.8.0-2.el9ap
Red Hat ansible automation platform 2.4python-cryptography0:42.0.5-1.el9ap
Red Hat ansible automation platform 2.4python-cryptography-debugsource0:42.0.5-1.el9ap
Red Hat ansible automation platform 2.4python-django0:4.2.11-1.el9ap
Red Hat ansible automation platform 2.4python-galaxy-ng0:4.9.2-1.el9ap
Red Hat ansible automation platform 2.4python-gunicorn0:22.0.0-1.el9ap
Red Hat ansible automation platform 2.4python-idna0:3.7-1.el9ap
Red Hat ansible automation platform 2.4python-jinja20:3.1.4-1.el9ap
Red Hat ansible automation platform 2.4python-pillow0:10.3.0-1.el9ap
Red Hat ansible automation platform 2.4python-pillow-debugsource0:10.3.0-1.el9ap
Red Hat ansible automation platform 2.4python-pydantic0:1.10.15-1.el9ap
Red Hat ansible automation platform 2.4python-requests0:2.32.2-1.el9ap
Red Hat ansible automation platform 2.4python-social-auth-app-django0:5.4.1-1.el9ap
Red Hat ansible automation platform 2.4python-sqlparse0:0.5.0-1.el9ap
Red Hat ansible automation platform 2.4python3-aiohttp0:3.9.3-1.el9ap
Red Hat ansible automation platform 2.4python3-aiohttp0:3.9.5-1.el9ap
Red Hat ansible automation platform 2.4python3-aiohttp-debuginfo0:3.9.5-1.el9ap
Red Hat ansible automation platform 2.4python3-aiohttp-debuginfo0:3.9.3-1.el9ap
Red Hat ansible automation platform 2.4python3-black0:22.8.0-2.el9ap
Red Hat ansible automation platform 2.4python3-cryptography0:42.0.5-1.el9ap
Red Hat ansible automation platform 2.4python3-cryptography-debuginfo0:42.0.5-1.el9ap
Red Hat ansible automation platform 2.4python3-django0:4.2.11-1.el9ap
Red Hat ansible automation platform 2.4python3-galaxy-ng0:4.9.2-1.el9ap
Red Hat ansible automation platform 2.4python3-gunicorn0:22.0.0-1.el9ap
Red Hat ansible automation platform 2.4python3-idna0:3.7-1.el9ap
Red Hat ansible automation platform 2.4python3-jinja20:3.1.4-1.el9ap
Red Hat ansible automation platform 2.4python3-pillow0:10.3.0-1.el9ap
Red Hat ansible automation platform 2.4python3-pillow-debuginfo0:10.3.0-1.el9ap
Red Hat ansible automation platform 2.4python3-pydantic0:1.10.15-1.el9ap
Red Hat ansible automation platform 2.4python3-requests0:2.32.2-1.el9ap
Red Hat ansible automation platform 2.4python3-social-auth-app-django0:5.4.1-1.el9ap
Red Hat ansible automation platform 2.4python3-sqlparse0:0.5.0-1.el9ap
Red Hat ansible automation platform 2.4python39-aiohttp0:3.9.3-1.el8ap
Red Hat ansible automation platform 2.4python39-aiohttp0:3.9.5-1.el8ap
Red Hat ansible automation platform 2.4python39-aiohttp-debuginfo0:3.9.5-1.el8ap
Red Hat ansible automation platform 2.4python39-aiohttp-debuginfo0:3.9.3-1.el8ap
Red Hat ansible automation platform 2.4python39-black0:22.8.0-2.el8ap
Red Hat ansible automation platform 2.4python39-cryptography0:42.0.5-1.el8ap
Red Hat ansible automation platform 2.4python39-cryptography-debuginfo0:42.0.5-1.el8ap
Red Hat ansible automation platform 2.4python39-django0:4.2.11-1.el8ap
Red Hat ansible automation platform 2.4python39-galaxy-ng0:4.9.2-1.el8ap
Red Hat ansible automation platform 2.4python39-gunicorn0:22.0.0-1.el8ap
Red Hat ansible automation platform 2.4python39-idna0:3.7-1.el8ap
Red Hat ansible automation platform 2.4python39-jinja20:3.1.4-1.el8ap
Red Hat ansible automation platform 2.4python39-pillow0:10.3.0-1.el8ap
Red Hat ansible automation platform 2.4python39-pillow-debuginfo0:10.3.0-1.el8ap
Red Hat ansible automation platform 2.4python39-pydantic0:1.10.15-1.el8ap
Red Hat ansible automation platform 2.4python39-requests0:2.32.2-1.el8ap
Red Hat ansible automation platform 2.4python39-social-auth-app-django0:5.4.1-1.el8ap
Red Hat ansible automation platform 2.4python39-sqlparse0:0.5.0-1.el8ap
Red Hat ansible automation platform 2.4python3x-aiohttp0:3.9.5-1.el8ap
Red Hat ansible automation platform 2.4python3x-aiohttp0:3.9.3-1.el8ap
Red Hat ansible automation platform 2.4python3x-aiohttp-debugsource0:3.9.5-1.el8ap
Red Hat ansible automation platform 2.4python3x-aiohttp-debugsource0:3.9.3-1.el8ap
Red Hat ansible automation platform 2.4python3x-black0:22.8.0-2.el8ap
Red Hat ansible automation platform 2.4python3x-cryptography0:42.0.5-1.el8ap
Red Hat ansible automation platform 2.4python3x-cryptography-debugsource0:42.0.5-1.el8ap
Red Hat ansible automation platform 2.4python3x-django0:4.2.11-1.el8ap
Red Hat ansible automation platform 2.4python3x-galaxy-ng0:4.9.2-1.el8ap
Red Hat ansible automation platform 2.4python3x-gunicorn0:22.0.0-1.el8ap
Red Hat ansible automation platform 2.4python3x-idna0:3.7-1.el8ap
Red Hat ansible automation platform 2.4python3x-jinja20:3.1.4-1.el8ap
Red Hat ansible automation platform 2.4python3x-pillow0:10.3.0-1.el8ap
Red Hat ansible automation platform 2.4python3x-pillow-debugsource0:10.3.0-1.el8ap
Red Hat ansible automation platform 2.4python3x-pydantic0:1.10.15-1.el8ap
Red Hat ansible automation platform 2.4python3x-requests0:2.32.2-1.el8ap
Red Hat ansible automation platform 2.4python3x-social-auth-app-django0:5.4.1-1.el8ap
Red Hat ansible automation platform 2.4python3x-sqlparse0:0.5.0-1.el8ap
Red Hat ansible automation platform 2.4receptor0:1.4.8-1.el8ap
Red Hat ansible automation platform 2.4receptor0:1.4.8-1.el9ap
Red Hat ansible automation platform 2.4receptor0:1.4.5-1.el9ap
Red Hat ansible automation platform 2.4receptor0:1.4.5-1.el8ap
Red Hat ansible automation platform 2.4receptorctl0:1.4.8-1.el9ap
Red Hat ansible automation platform 2.4receptorctl0:1.4.5-1.el9ap
Red Hat ansible automation platform 2.4receptorctl0:1.4.5-1.el8ap
Red Hat ansible automation platform 2.4receptorctl0:1.4.8-1.el8ap
Red Hat ansible automation platform developer 2.4python-black0:22.8.0-2.el9ap
Red Hat ansible automation platform developer 2.4python-cryptography0:42.0.5-1.el9ap
Red Hat ansible automation platform developer 2.4python-cryptography-debugsource0:42.0.5-1.el9ap
Red Hat ansible automation platform developer 2.4python-idna0:3.7-1.el9ap
Red Hat ansible automation platform developer 2.4python-jinja20:3.1.4-1.el9ap
Red Hat ansible automation platform developer 2.4python-requests0:2.32.2-1.el9ap
Red Hat ansible automation platform developer 2.4python3-black0:22.8.0-2.el9ap
Red Hat ansible automation platform developer 2.4python3-cryptography0:42.0.5-1.el9ap
Red Hat ansible automation platform developer 2.4python3-cryptography-debuginfo0:42.0.5-1.el9ap
Red Hat ansible automation platform developer 2.4python3-idna0:3.7-1.el9ap
Red Hat ansible automation platform developer 2.4python3-jinja20:3.1.4-1.el9ap
Red Hat ansible automation platform developer 2.4python3-requests0:2.32.2-1.el9ap
Red Hat ansible automation platform developer 2.4python39-black0:22.8.0-2.el8ap
Red Hat ansible automation platform developer 2.4python39-cryptography0:42.0.5-1.el8ap
Red Hat ansible automation platform developer 2.4python39-cryptography-debuginfo0:42.0.5-1.el8ap
Red Hat ansible automation platform developer 2.4python39-idna0:3.7-1.el8ap
Red Hat ansible automation platform developer 2.4python39-jinja20:3.1.4-1.el8ap
Red Hat ansible automation platform developer 2.4python39-requests0:2.32.2-1.el8ap
Red Hat ansible automation platform developer 2.4python3x-black0:22.8.0-2.el8ap
Red Hat ansible automation platform developer 2.4python3x-cryptography0:42.0.5-1.el8ap
Red Hat ansible automation platform developer 2.4python3x-cryptography-debugsource0:42.0.5-1.el8ap
Red Hat ansible automation platform developer 2.4python3x-idna0:3.7-1.el8ap
Red Hat ansible automation platform developer 2.4python3x-jinja20:3.1.4-1.el8ap
Red Hat ansible automation platform developer 2.4python3x-requests0:2.32.2-1.el8ap
Red Hat ansible automation platform developer 2.4receptor0:1.4.8-1.el9ap
Red Hat ansible automation platform developer 2.4receptor0:1.4.5-1.el8ap
Red Hat ansible automation platform developer 2.4receptor0:1.4.5-1.el9ap
Red Hat ansible automation platform developer 2.4receptor0:1.4.8-1.el8ap
Red Hat ansible automation platform developer 2.4receptorctl0:1.4.5-1.el8ap
Red Hat ansible automation platform developer 2.4receptorctl0:1.4.8-1.el8ap
Red Hat ansible automation platform developer 2.4receptorctl0:1.4.8-1.el9ap
Red Hat ansible automation platform developer 2.4receptorctl0:1.4.5-1.el9ap
Red Hat ansible automation platform inside 2.4python-black0:22.8.0-2.el9ap
Red Hat ansible automation platform inside 2.4python-cryptography0:42.0.5-1.el9ap
Red Hat ansible automation platform inside 2.4python-cryptography-debugsource0:42.0.5-1.el9ap
Red Hat ansible automation platform inside 2.4python-jinja20:3.1.4-1.el9ap
Red Hat ansible automation platform inside 2.4python3-black0:22.8.0-2.el9ap
Red Hat ansible automation platform inside 2.4python3-cryptography0:42.0.5-1.el9ap
Red Hat ansible automation platform inside 2.4python3-cryptography-debuginfo0:42.0.5-1.el9ap
Red Hat ansible automation platform inside 2.4python3-jinja20:3.1.4-1.el9ap
Red Hat ansible automation platform inside 2.4python39-black0:22.8.0-2.el8ap
Red Hat ansible automation platform inside 2.4python39-cryptography0:42.0.5-1.el8ap
Red Hat ansible automation platform inside 2.4python39-cryptography-debuginfo0:42.0.5-1.el8ap
Red Hat ansible automation platform inside 2.4python39-jinja20:3.1.4-1.el8ap
Red Hat ansible automation platform inside 2.4python3x-black0:22.8.0-2.el8ap
Red Hat ansible automation platform inside 2.4python3x-cryptography0:42.0.5-1.el8ap
Red Hat ansible automation platform inside 2.4python3x-cryptography-debugsource0:42.0.5-1.el8ap
Red Hat ansible automation platform inside 2.4python3x-jinja20:3.1.4-1.el8ap
Red Hat ansible automation platform inside 2.4receptor0:1.4.5-1.el9ap
Red Hat ansible automation platform inside 2.4receptor0:1.4.5-1.el8ap
Red Hat ansible automation platform inside 2.4receptor0:1.4.8-1.el8ap
Red Hat ansible automation platform inside 2.4receptor0:1.4.8-1.el9ap
Red Hat ansible automation platform inside 2.4receptorctl0:1.4.5-1.el8ap
Red Hat ansible automation platform inside 2.4receptorctl0:1.4.5-1.el9ap
Red Hat ansible automation platform inside 2.4receptorctl0:1.4.8-1.el8ap
Red Hat ansible automation platform inside 2.4receptorctl0:1.4.8-1.el9ap
Red Hat Enterprise Linux 8python-cryptography0:3.2.1-8.el8_10
Red Hat Enterprise Linux 8python-cryptography-debugsource0:3.2.1-8.el8_10
Red Hat Enterprise Linux 8python3-cryptography0:3.2.1-8.el8_10
Red Hat Enterprise Linux 8python3-cryptography-debuginfo0:3.2.1-8.el8_10
Red Hat Enterprise Linux 8python3.11-cryptography0:37.0.2-6.el8
Red Hat Enterprise Linux 8python3.11-cryptography-debuginfo0:37.0.2-6.el8
Red Hat Enterprise Linux 8python3.11-cryptography-debugsource0:37.0.2-6.el8
Red Hat Enterprise Linux 9python-cryptography0:36.0.1-5.el9_6
Red Hat Enterprise Linux 9python-cryptography-debugsource0:36.0.1-5.el9_6
Red Hat Enterprise Linux 9python3-cryptography0:36.0.1-5.el9_6
Red Hat Enterprise Linux 9python3-cryptography-debuginfo0:36.0.1-5.el9_6
Red Hat Enterprise Linux 9python3.11-cryptography0:37.0.2-6.el9
Red Hat Enterprise Linux 9python3.11-cryptography-debuginfo0:37.0.2-6.el9
Red Hat Enterprise Linux 9python3.11-cryptography-debugsource0:37.0.2-6.el9
Red Hat rhel aus 8.4python-cryptography0:3.2.1-4.el8_4.1
Red Hat rhel aus 8.4python-cryptography-debugsource0:3.2.1-4.el8_4.1
Red Hat rhel aus 8.4python3-cryptography0:3.2.1-4.el8_4.1
Red Hat rhel aus 8.4python3-cryptography-debuginfo0:3.2.1-4.el8_4.1
Red Hat rhel aus 8.6python-cryptography0:3.2.1-5.1.el8_6.1
Red Hat rhel aus 8.6python-cryptography-debugsource0:3.2.1-5.1.el8_6.1
Red Hat rhel aus 8.6python3-cryptography0:3.2.1-5.1.el8_6.1
Red Hat rhel aus 8.6python3-cryptography-debuginfo0:3.2.1-5.1.el8_6.1
Red Hat rhel e4s 8.6python-cryptography0:3.2.1-5.1.el8_6.1
Red Hat rhel e4s 8.6python-cryptography-debugsource0:3.2.1-5.1.el8_6.1
Red Hat rhel e4s 8.6python3-cryptography0:3.2.1-5.1.el8_6.1
Red Hat rhel e4s 8.6python3-cryptography-debuginfo0:3.2.1-5.1.el8_6.1
Red Hat rhel e4s 8.8python-cryptography0:3.2.1-6.el8_8
Red Hat rhel e4s 8.8python-cryptography-debugsource0:3.2.1-6.el8_8
Red Hat rhel e4s 8.8python3-cryptography0:3.2.1-6.el8_8
Red Hat rhel e4s 8.8python3-cryptography-debuginfo0:3.2.1-6.el8_8
Red Hat rhel e4s 9.0python-cryptography0:36.0.1-1.el9_0.1
Red Hat rhel e4s 9.0python-cryptography-debugsource0:36.0.1-1.el9_0.1
Red Hat rhel e4s 9.0python3-cryptography0:36.0.1-1.el9_0.1
Red Hat rhel e4s 9.0python3-cryptography-debuginfo0:36.0.1-1.el9_0.1
Red Hat rhel e4s 9.2python-cryptography0:36.0.1-2.el9_2.1
Red Hat rhel e4s 9.2python-cryptography-debugsource0:36.0.1-2.el9_2.1
Red Hat rhel e4s 9.2python3-cryptography0:36.0.1-2.el9_2.1
Red Hat rhel e4s 9.2python3-cryptography-debuginfo0:36.0.1-2.el9_2.1
Red Hat rhel eus 8.8python3.11-cryptography0:37.0.2-5.el8_8.1
Red Hat rhel eus 8.8python3.11-cryptography-debuginfo0:37.0.2-5.el8_8.1
Red Hat rhel eus 8.8python3.11-cryptography-debugsource0:37.0.2-5.el8_8.1
Red Hat rhel eus 9.4python-cryptography0:36.0.1-4.el9_4.1
Red Hat rhel eus 9.4python-cryptography-debugsource0:36.0.1-4.el9_4.1
Red Hat rhel eus 9.4python3-cryptography0:36.0.1-4.el9_4.1
Red Hat rhel eus 9.4python3-cryptography-debuginfo0:36.0.1-4.el9_4.1
Red Hat rhel eus long life 8.4python-cryptography0:3.2.1-4.el8_4.1
Red Hat rhel eus long life 8.4python-cryptography-debugsource0:3.2.1-4.el8_4.1
Red Hat rhel eus long life 8.4python3-cryptography0:3.2.1-4.el8_4.1
Red Hat rhel eus long life 8.4python3-cryptography-debuginfo0:3.2.1-4.el8_4.1
Red Hat rhel tus 8.6python-cryptography0:3.2.1-5.1.el8_6.1
Red Hat rhel tus 8.6python-cryptography-debugsource0:3.2.1-5.1.el8_6.1
Red Hat rhel tus 8.6python3-cryptography0:3.2.1-5.1.el8_6.1
Red Hat rhel tus 8.6python3-cryptography-debuginfo0:3.2.1-5.1.el8_6.1
Red Hat rhel tus 8.8python-cryptography0:3.2.1-6.el8_8
Red Hat rhel tus 8.8python-cryptography-debugsource0:3.2.1-6.el8_8
Red Hat rhel tus 8.8python3-cryptography0:3.2.1-6.el8_8
Red Hat rhel tus 8.8python3-cryptography-debuginfo0:3.2.1-6.el8_8
Red Hat rhui 4python-aiohttp0:3.9.2-1.el8ui
Red Hat rhui 4python-aiohttp-debugsource0:3.9.2-1.el8ui
Red Hat rhui 4python-cryptography0:41.0.6-1.el8ui
Red Hat rhui 4python-cryptography-debugsource0:41.0.6-1.el8ui
Red Hat rhui 4python-django0:4.2.11-1.el8ui
Red Hat rhui 4python-ecdsa0:0.18.0-4.el8ui
Red Hat rhui 4python-jinja20:3.1.3-1.el8ui
Red Hat rhui 4python3.11-aiohttp0:3.9.2-1.el8ui
Red Hat rhui 4python3.11-aiohttp-debuginfo0:3.9.2-1.el8ui
Red Hat rhui 4python3.11-cryptography0:41.0.6-1.el8ui
Red Hat rhui 4python3.11-cryptography-debuginfo0:41.0.6-1.el8ui
Red Hat rhui 4python3.11-django0:4.2.11-1.el8ui
Red Hat rhui 4python3.11-ecdsa0:0.18.0-4.el8ui
Red Hat rhui 4python3.11-jinja20:3.1.3-1.el8ui
Rocky Linux 8python-cryptography0:3.2.1-8.el8_10
Rocky Linux 8python3.11-cryptography0:37.0.2-6.el8
Rocky Linux 9python-cryptography0:36.0.1-5.el9_6
Rocky Linux 9python3.11-cryptography0:37.0.2-6.el9
SUSE Linux Enterprise Micro 5.1python-cryptography3.3.2-150200.22.1
SUSE Linux Enterprise Micro 5.2python-cryptography3.3.2-150200.22.1
SUSE Linux Enterprise Micro 5.3python3-cryptography3.3.2-150400.23.1
SUSE Linux Enterprise Micro 5.4python3-cryptography3.3.2-150400.23.1
SUSE Linux Enterprise Micro 5.5python3-cryptography3.3.2-150400.23.1
SUSE Linux Enterprise Module for Basesystem 15 SP4python3-cryptography3.3.2-150400.23.1
SUSE Linux Enterprise Module for Basesystem 15 SP5python3-cryptography3.3.2-150400.23.1
SUSE Linux Enterprise Module for Public Cloud 15 SP1python-cryptography3.3.2-150100.7.18.1
SUSE Linux Enterprise Module for Python 3 15 SP4python-cryptography41.0.3-150400.16.12.1
SUSE Linux Enterprise Module for Python 3 15 SP5python-cryptography41.0.3-150400.16.12.1
Ubuntu 20.04 LTSpython-cryptography2.8-3ubuntu0.2
Ubuntu 22.04 LTSpython-cryptography3.4.8-1ubuntu2.1
Wolfimitmproxy12.2.1-r0
Wolfipy3-cassandra-medusa0.19.1-r1
Wolfipy3-cassandra-medusa-compat0.19.1-r1
openSUSE Leap 15.4python-cryptography41.0.3-150400.16.12.1
openSUSE Leap 15.4python3-cryptography3.3.2-150400.23.1
openSUSE Leap 15.5python-cryptography41.0.3-150400.16.12.1
openSUSE Leap 15.5python3-cryptography3.3.2-150400.23.1
openSUSE Leap Micro 5.3python3-cryptography3.3.2-150400.23.1
openSUSE Leap Micro 5.4python3-cryptography3.3.2-150400.23.1
openSUSE Tumbleweedpython-cryptography50.0.0-1.1
openSUSE Tumbleweedpython-cryptography41.0.7-1.1