python-cryptography vulnerability

2024-03-1400:00:00

ubuntu.com

ubuntu 16.04 esm

python-cryptography

openssl api

rsa pkcs#1 v1.5

vulnerability

information exposure

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

41.2%

JSON

Releases

Ubuntu 16.04 ESM

Packages

python-cryptography - Cryptography Python library

Details

USN-6673-1 provided a security update for python-cryptography.
This update provides the corresponding update for Ubuntu 16.04 LTS.

Original advisory details:

Hubert Kario discovered that python-cryptography incorrectly handled
errors returned by the OpenSSL API when processing incorrect padding in
RSA PKCS#1 v1.5. A remote attacker could possibly use this issue to expose
confidential or sensitive information. (CVE-2023-50782)

OSVersionArchitecturePackageVersionFilename
Ubuntu16.04noarchpython-cryptography< 1.2.3-1ubuntu0.3+esm1UNKNOWN
Ubuntu16.04noarchpython-cryptography< 1.2.3-1ubuntu0.3UNKNOWN
Ubuntu16.04noarchpython-cryptography-doc< 1.2.3-1ubuntu0.3UNKNOWN
Ubuntu16.04noarchpython3-cryptography< 1.2.3-1ubuntu0.3UNKNOWN
Ubuntu16.04noarchpython3-cryptography< 1.2.3-1ubuntu0.3+esm1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	16.04	noarch	python-cryptography	< 1.2.3-1ubuntu0.3+esm1	UNKNOWN
Ubuntu	16.04	noarch	python-cryptography	< 1.2.3-1ubuntu0.3	UNKNOWN
Ubuntu	16.04	noarch	python-cryptography-doc	< 1.2.3-1ubuntu0.3	UNKNOWN
Ubuntu	16.04	noarch	python3-cryptography	< 1.2.3-1ubuntu0.3	UNKNOWN
Ubuntu	16.04	noarch	python3-cryptography	< 1.2.3-1ubuntu0.3+esm1	UNKNOWN