Veracode Vulnerability DatabaseVERACODE:44471Denial Of Service (DoS)
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
25.1%
cryptography is vulnerable to Denial of Service (DoS). The vulnerability is due to NULL-pointer dereference while loading PKCS7 certificates. This could lead to Denial Of Service if an application is utilizing the load_der_pkcs7_certificates or load_pem_pkcs7_certificates functions.
| CPE | Name | Operator | Version |
|---|---|---|---|
| cryptography | le | 41.0.5 | |
| cryptography | le | 41.0.5 |
References
www.openwall.com/lists/oss-security/2023/11/29/2
github.com/advisories/GHSA-jfhm-5ghh-2f97
github.com/pyca/cryptography/commit/f09c261ca10a31fe41b1262306db7f8f1da0e48a
github.com/pyca/cryptography/pull/9926
github.com/pyca/cryptography/security/advisories/GHSA-jfhm-5ghh-2f97
lists.fedoraproject.org/archives/list/[email protected]/message/QMNTYMUGFJSDBYBU22FUYBHFRZODRKXV/
Related
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
25.1%