CVE-2024-26130

🗓️ 21 Feb 2024 17:09:15Reported by GitHub_MType

cryptography package <v38.0.0-v42.0.4> NULL pointer dereference issue resolved in v42.0.4

Reporter	Title	Published	Views	Family All 71
OSV	CGA-pp43-3329-7mh9	6 Jun 202412:28	–	osv
OSV	CGA-mg75-rw8r-52jj	6 Jun 202412:26	–	osv
OSV	CVE-2024-26130	21 Feb 202417:15	–	osv
OSV	python-cryptography vulnerability	27 May 202415:33	–	osv
OSV	CGA-rhv7-2mv6-m9fr	6 Jun 202412:29	–	osv
OSV	CGA-fmv3-6w9v-j6vx	6 Jun 202412:25	–	osv
OSV	CGA-f62w-c924-7874	6 Jun 202412:27	–	osv
OSV	cryptography NULL pointer dereference with pkcs12.serialize_key_and_certificates when called with a non-matching certificate and private key and an hmac_hash override	21 Feb 202418:04	–	osv
OSV	python310-cryptography-42.0.4-1.1 on GA media	15 Jun 202400:00	–	osv
OSV	Security update for python-cryptography	21 Jun 202411:08	–	osv

Vulners

Vulnrichment

Node

pyca cryptographyRange38.0.0–42.0.4

[
  {
    "vendor": "pyca",
    "product": "cryptography",
    "versions": [
      {
        "version": ">= 38.0.0, < 42.0.4",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/pyca/cryptography/pull/10423
github	www.github.com/pyca/cryptography/security/advisories/GHSA-6vqw-3v5j-54x4
github	www.github.com/pyca/cryptography/commit/97d231672763cdb5959a3b191e692a362f1b9e55

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

21 Feb 2024 17:15Current

7.5High risk

Vulners AI Score7.5

CVSS37.5

EPSS0.0004

SSVC

CWE-476