Python Cryptography package vulnerable to Bleichenbacher timing oracle attack

🗓️ 05 Feb 2024 21:30:31Reported by GitHub Advisory DatabaseType

github🔗 github.com👁 147 Views

Python Cryptography package vulnerable to Bleichenbacher timing oracle attack. Flaw allows remote attacker to decrypt captured messages in TLS servers using RSA key exchanges, exposing sensitive data

Reporter	Title	Published	Views	Family All 149
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Edge Application Manager	20 Aug 202502:37	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities exists in IBM Netezza Performance Server Replication Services	27 Feb 202619:55	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in cryptography affects IBM Cloud Pak for Data System 2.0 (CPDS 2.0) [CVE-2023-0286, CVE-2023-50782]	20 Jun 202510:08	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in cryptography and Jinja [CVE-2023-50782, CVE-2024-22195]	8 Apr 202412:54	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite uses cryptography-41.0.2-cp37-abi3-manylinux_2_28_x86_64.whl which is vulnerable to CVE-2023-50782	29 May 202406:30	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in cryptography affects IBM Process Mining CVE-2023-50782	29 Mar 202410:42	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Truststore Manager uses cryptography-41.0.4-cp37-abi3-manylinux_2_28_x86_64.whl which is vulnerable to CVE-2023-50782	29 May 202414:52	–	ibm
IBM Security Bulletins	Security Bulletin: QRadar Suite Software includes components with multiple known vulnerabilities	10 Apr 202409:27	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to sensitive information exposure in Python Cryptographic Authority [CVE-2023-50782]	25 Apr 202418:31	–	ibm
IBM Security Bulletins	Security Bulletin: Cryptography expose cryptographic primitives and recipes	1 Jul 202510:02	–	ibm

Vulners

Node

cryptography py3.10_cryptographyRange<42.0.0pip

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-50782
access	www.access.redhat.com/security/cve/CVE-2023-50782
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
github	www.github.com/pyca/cryptography/issues/9785
couchbase	www.couchbase.com/alerts
github	www.github.com/advisories/GHSA-3ww4-gg4f-jr7f

25 Mar 2026 05:05Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.17.5

EPSS0.00879

SSVC

python cryptography vulnerable bleichenbacher timing oracle attack tls servers rsa key exchanges sensitive data flaw