CVE-2023-38325

2023-07-1420:15:09

Debian Security Bug Tracker

security-tracker.debian.org

cryptography

python

ssh

certificate

mishandling

critical options

unix

0.001 Low

EPSS

Percentile

25.0%

JSON

The cryptography package before 41.0.2 for Python mishandles SSH certificates that have critical options.

OSVersionArchitecturePackageVersionFilename
Debian12allpython-cryptography< 38.0.4-3python-cryptography_38.0.4-3_all.deb
Debian11allpython-cryptography< 3.3.2-1python-cryptography_3.3.2-1_all.deb
Debian10allpython-cryptography< 2.6.1-3+deb10u2python-cryptography_2.6.1-3+deb10u2_all.deb
Debian999allpython-cryptography< 42.0.5-2python-cryptography_42.0.5-2_all.deb
Debian13allpython-cryptography< 42.0.5-2python-cryptography_42.0.5-2_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	python-cryptography	< 38.0.4-3	python-cryptography_38.0.4-3_all.deb
Debian	11	all	python-cryptography	< 3.3.2-1	python-cryptography_3.3.2-1_all.deb
Debian	10	all	python-cryptography	< 2.6.1-3+deb10u2	python-cryptography_2.6.1-3+deb10u2_all.deb
Debian	999	all	python-cryptography	< 42.0.5-2	python-cryptography_42.0.5-2_all.deb
Debian	13	all	python-cryptography	< 42.0.5-2	python-cryptography_42.0.5-2_all.deb

0.001 Low

EPSS

Percentile

25.0%

JSON

Related for DEBIANCVE:CVE-2023-38325