The cryptography package before 41.0.2 for Python mishandles SSH certificates that have critical options.
Metrics
Affected Vendors & Products
References
History
Thu, 05 Sep 2024 16:30:00 +0000
Type | Values Removed | Values Added |
---|---|---|
First Time appeared |
Cryptography.io
Cryptography.io cryptography |
|
CPEs | cpe:2.3:a:cryptography.io:cryptography:*:*:*:*:*:python:*:* | |
Vendors & Products |
Cryptography Project
Cryptography Project cryptography |
Cryptography.io
Cryptography.io cryptography |
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2023-07-14T00:00:00
Updated: 2024-08-02T17:39:12.677Z
Reserved: 2023-07-14T00:00:00
Link: CVE-2023-38325
Vulnrichment
No data.
NVD
Status : Modified
Published: 2023-07-14T20:15:09.157
Modified: 2024-09-05T16:09:10.430
Link: CVE-2023-38325
Redhat