Описание
The cryptography package before 41.0.2 for Python mishandles SSH certificates that have critical options.
Ссылки
- Patch
- ExploitIssue TrackingPatchVendor Advisory
- PatchVendor Advisory
- Release Notes
- Patch
- ExploitIssue TrackingPatchVendor Advisory
- PatchVendor Advisory
- Release Notes
Уязвимые конфигурации
Конфигурация 1Версия от 40.0.0 (включая) до 41.0.2 (исключая)
cpe:2.3:a:cryptography.io:cryptography:*:*:*:*:*:python:*:*
EPSS
Процентиль: 77%
0.01069
Низкий
7.5 High
CVSS3
Дефекты
CWE-295
Связанные уязвимости
CVSS3: 7.5
ubuntu
около 2 лет назад
The cryptography package before 41.0.2 for Python mishandles SSH certificates that have critical options.
CVSS3: 7.5
redhat
около 2 лет назад
The cryptography package before 41.0.2 for Python mishandles SSH certificates that have critical options.
CVSS3: 7.5
debian
около 2 лет назад
The cryptography package before 41.0.2 for Python mishandles SSH certi ...
EPSS
Процентиль: 77%
0.01069
Низкий
7.5 High
CVSS3
Дефекты
CWE-295