Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2013-1895
HistoryJan 28, 2020 - 12:00 a.m.

CVE-2013-1895

2020-01-2800:00:00
ubuntu.com
ubuntu.com
13

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS

0.016

Percentile

87.6%

JSON

The py-bcrypt module before 0.3 for Python does not properly handle
concurrent memory access, which allows attackers to bypass authentication
via multiple authentication requests, which trigger the password hash to be
overwritten.

Bugs

Notes

Author Note
mdeslaur lucid and precise aren’t vulnerable as v0.1 did not release the GIL.

Related

seebug 1
debiancve 1
openvas 4
cve 1
nessus 2
osv 2
prion 1
fedora 2
veracode 1
nvd 1
cvelist 1
github 1
seebug
seebug
Python 'py-bcrypt' 樑块身份ιͺŒθ―η»•θΏ‡ζΌζ΄ž(CVE-2013-1895)
2013-03-27 00:00:00
debiancve
debiancve
CVE-2013-1895
2020-01-28 15:15:14
openvas
openvas
Fedora Update for py-bcrypt FEDORA-2013-4447
2013-04-05 00:00:00
Fedora Update for py-bcrypt FEDORA-2013-4424
2013-04-05 00:00:00
Fedora Update for py-bcrypt FEDORA-2013-4424
2013-04-05 00:00:00
cve
cve
CVE-2013-1895
2020-01-28 15:15:14
nessus
nessus
Fedora 18 : py-bcrypt-0.3-1.fc18 (2013-4447)
2013-04-05 00:00:00
Fedora 17 : py-bcrypt-0.3-1.fc17 (2013-4424)
2013-04-05 00:00:00
osv
osv
Improper Restriction of Excessive Authentication Attempts in py-bcrypt
2021-10-12 16:31:22
PYSEC-2020-249
2020-01-28 15:15:00
prion
prion
Authentication flaw
2020-01-28 15:15:00
fedora
fedora
[SECURITY] Fedora 17 Update: py-bcrypt-0.3-1.fc17
2013-04-04 23:51:52
[SECURITY] Fedora 18 Update: py-bcrypt-0.3-1.fc18
2013-04-04 23:50:33
veracode
veracode
Access Restriction Bypass
2021-10-13 19:13:00
nvd
nvd
CVE-2013-1895
2020-01-28 15:15:14
cvelist
cvelist
CVE-2013-1895
2020-01-28 14:30:24
github
github
Improper Restriction of Excessive Authentication Attempts in py-bcrypt
2021-10-12 16:31:22

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS

0.016

Percentile

87.6%

JSON
Related for UB:CVE-2013-1895
seebug1debiancve1openvas4cve1nessus2osv2prion1fedora2veracode1nvd1cvelist1github1