Improper Certificate Validation

cryptography is vulnerable to Improper Certificate Validation. The vulnerability exists due to the parseextsopts function in ssh.py because loading ssh certificates generated with ssh-keygen or SSHCertificateBuilder yields unexpected results which potentially allows an attacker to perform...

SUSE CVE-2023-38325

The cryptography package before 41.0.2 for Python mishandles SSH certificates that have critical options...

VX-API - Collection Of Various Malicious Functionality To Aid In Malware Development

The VX-API is a collection of malicious functionality to aid in malware development. It is recommended you clone and/or download this entire repo then open the Visual Studio solution file to easily explore functionality and concepts. Some functions may be dependent on other functions present with...

The vulnerability of the programming interface of Windows CryptoAPI on Windows operating systems allows a perpetrator to cause a service failure.

The vulnerability of the Windows CryptoAPI programming interface on Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

aad-fastapi-dl37 (>=1.0.0 <=1.0.2), acmen (=0.5.0) +401 more potentially affected by CVE-2023-38325 via cryptography (>=40.0.0 <=41.0.1)

cryptography PYPI version =40.0.0, =1.0.0, =0.0.1, =1.2.4, =0.0.12, =4.4.6, =2023.4.0b0, =2.0.0, =0.0.1, =0.2.0, =2.2.13, =3.0.1 and more Source cves: CVE-2023-38325 Source advisory: OSV:GHSA-CF7P-GM2M-833M...

GHSA-CF7P-GM2M-833M cryptography mishandles SSH certificates

The cryptography package before 41.0.2 for Python mishandles SSH certificates that have critical options...

cryptography mishandles SSH certificates

The cryptography package before 41.0.2 for Python mishandles SSH certificates that have critical options...

CVE-2023-38325

The cryptography package before 41.0.2 for Python mishandles SSH certificates that have critical options...

CVE-2023-38325

The cryptography package before 41.0.2 for Python mishandles SSH certificates that have critical options...

ALPINE-CVE-2023-38325

The cryptography package before 41.0.2 for Python mishandles SSH certificates that have critical options...

CVE-2023-38325

The cryptography package before 41.0.2 for Python mishandles SSH certificates that have critical options...

Code injection

The cryptography package before 41.0.2 for Python mishandles SSH certificates that have critical options...

aad-fastapi-dl37 (>=1.0.0 <=1.0.2), acmen (=0.5.0) +401 more potentially affected by CVE-2023-38325 via cryptography (>=40.0.0 <=41.0.1)

cryptography PYPI version =40.0.0, =1.0.0, =0.0.1, =1.2.4, =0.0.12, =4.4.6, =2023.4.0b0, =2.0.0, =0.0.1, =0.2.0, =2.2.13, =3.0.1 and more Source cves: CVE-2023-38325 Source advisory: OSV:PYSEC-2023-112...

PYSEC-2023-112

The cryptography package before 41.0.2 for Python mishandles SSH certificates that have critical options...

PYSEC-2023-112

The cryptography package before 41.0.2 for Python mishandles SSH certificates that have critical options...

CVE-2023-38325

The cryptography package before 41.0.2 for Python mishandles SSH certificates that have critical options...

python-cryptography 信任管理问题漏洞

python-cryptography is a Python code library for cryptographic applications from the Cryptographic team. A security vulnerability exists in python-cryptography versions prior to 41.0.2, which stems from incorrectly handling SSH certificates with critical options...

CVE-2023-38325

CVE-2023-38325 : The cryptography package (Python) before 41.0.2 mishandles SSH certificates with critical options. Public IBM/IBM Cloud Pak for Data System 2.0 advisories confirm this CVE applies to IBM Cloud Pak for Data System 2.0 (versions 2.0.0.0–2.0.2.1.IF2) and that a security patch is ava...

CVE-2023-38325

The cryptography package before 41.0.2 for Python mishandles SSH certificates that have critical options...

PT-2023-4923 · Pypi +2 · Cryptography +2

Name of the Vulnerable Software and Affected Versions: cryptography package versions prior to 41.0.2 Description: The issue is related to errors in the certificate authentication procedure, which can be exploited by a remote attacker to perform a man-in-the-middle attack. The problem arises from...