Lucene search
GoogleOSV:PYSEC-2020-249HistoryJan 28, 2020 - 3:15 p.m.
PYSEC-2020-249
2020-01-2815:15:00
Google
osv.dev
8
EPSS
0.016
Percentile
87.6%
The py-bcrypt module before 0.3 for Python does not properly handle concurrent memory access, which allows attackers to bypass authentication via multiple authentication requests, which trigger the password hash to be overwritten.
References
lists.fedoraproject.org/pipermail/package-announce/2013-April/101382.html
lists.fedoraproject.org/pipermail/package-announce/2013-April/101387.html
www.openwall.com/lists/oss-security/2013/03/26/2
www.securityfocus.com/bid/58702
exchange.xforce.ibmcloud.com/vulnerabilities/83039
github.com/advisories/GHSA-r838-q6jp-58xx
Related
seebug
seebug
Python 'py-bcrypt' 樑εθΊ«δ»½ιͺθ―η»θΏζΌζ΄(CVE-2013-1895)
2013-03-27 00:00:00
ubuntucve
ubuntucve
CVE-2013-1895
2020-01-28 00:00:00
openvas
openvas
Fedora Update for py-bcrypt FEDORA-2013-4447
2013-04-05 00:00:00
Fedora Update for py-bcrypt FEDORA-2013-4424
2013-04-05 00:00:00
Fedora Update for py-bcrypt FEDORA-2013-4424
2013-04-05 00:00:00
debiancve
debiancve
CVE-2013-1895
2020-01-28 15:15:14
cve
cve
CVE-2013-1895
2020-01-28 15:15:14
nessus
nessus
Fedora 18 : py-bcrypt-0.3-1.fc18 (2013-4447)
2013-04-05 00:00:00
Fedora 17 : py-bcrypt-0.3-1.fc17 (2013-4424)
2013-04-05 00:00:00
osv
osv
Improper Restriction of Excessive Authentication Attempts in py-bcrypt
2021-10-12 16:31:22
prion
prion
Authentication flaw
2020-01-28 15:15:00
fedora
fedora
[SECURITY] Fedora 17 Update: py-bcrypt-0.3-1.fc17
2013-04-04 23:51:52
[SECURITY] Fedora 18 Update: py-bcrypt-0.3-1.fc18
2013-04-04 23:50:33
veracode
veracode
Access Restriction Bypass
2021-10-13 19:13:00
nvd
nvd
CVE-2013-1895
2020-01-28 15:15:14
cvelist
cvelist
CVE-2013-1895
2020-01-28 14:30:24
github
github
Improper Restriction of Excessive Authentication Attempts in py-bcrypt
2021-10-12 16:31:22