Поиск уязвимостей
Количество 11
Количество 11
GHSA-fcf9-3qw3-gxmj
PyCA Cryptography vulnerable to GCM tag forgery
CVE-2018-10903
A flaw was found in python-cryptography versions between >=1.9.0 and <2.3. The finalize_with_tag API did not enforce a minimum tag length. If a user did not validate the input length prior to passing it to finalize_with_tag an attacker could craft an invalid payload with a shortened tag (e.g. 1 byte) such that they would have a 1 in 256 chance of passing the MAC check. GCM tag forgeries can cause key leakage.
CVE-2018-10903
A flaw was found in python-cryptography versions between >=1.9.0 and <2.3. The finalize_with_tag API did not enforce a minimum tag length. If a user did not validate the input length prior to passing it to finalize_with_tag an attacker could craft an invalid payload with a shortened tag (e.g. 1 byte) such that they would have a 1 in 256 chance of passing the MAC check. GCM tag forgeries can cause key leakage.
CVE-2018-10903
A flaw was found in python-cryptography versions between >=1.9.0 and <2.3. The finalize_with_tag API did not enforce a minimum tag length. If a user did not validate the input length prior to passing it to finalize_with_tag an attacker could craft an invalid payload with a shortened tag (e.g. 1 byte) such that they would have a 1 in 256 chance of passing the MAC check. GCM tag forgeries can cause key leakage.
CVE-2018-10903
A flaw was found in python-cryptography versions between >=1.9.0 and < ...
openSUSE-SU-2018:3445-1
Security update for python-cryptography
SUSE-SU-2022:4044-1
Security update for python-cryptography, python-cryptography-vectors
SUSE-SU-2020:0792-1
Security update for python-cffi, python-cryptography
SUSE-SU-2020:0790-1
Security update for python-cffi, python-cryptography, python-xattr
SUSE-SU-2018:3392-1
Security update for python-cryptography
ALT-PU-2018-3711
ALT-PU-2018-3711: package `python-module-cryptography` update to version 2.3.0-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-fcf9-3qw3-gxmj PyCA Cryptography vulnerable to GCM tag forgery | CVSS3: 7.5 | 3% Низкий | больше 8 лет назад |
 | CVE-2018-10903 A flaw was found in python-cryptography versions between >=1.9.0 and <2.3. The finalize_with_tag API did not enforce a minimum tag length. If a user did not validate the input length prior to passing it to finalize_with_tag an attacker could craft an invalid payload with a shortened tag (e.g. 1 byte) such that they would have a 1 in 256 chance of passing the MAC check. GCM tag forgeries can cause key leakage. | CVSS3: 7.5 | 3% Низкий | больше 8 лет назад |
 | CVE-2018-10903 A flaw was found in python-cryptography versions between >=1.9.0 and <2.3. The finalize_with_tag API did not enforce a minimum tag length. If a user did not validate the input length prior to passing it to finalize_with_tag an attacker could craft an invalid payload with a shortened tag (e.g. 1 byte) such that they would have a 1 in 256 chance of passing the MAC check. GCM tag forgeries can cause key leakage. | CVSS3: 7.5 | 3% Низкий | больше 8 лет назад |
 | CVE-2018-10903 A flaw was found in python-cryptography versions between >=1.9.0 and <2.3. The finalize_with_tag API did not enforce a minimum tag length. If a user did not validate the input length prior to passing it to finalize_with_tag an attacker could craft an invalid payload with a shortened tag (e.g. 1 byte) such that they would have a 1 in 256 chance of passing the MAC check. GCM tag forgeries can cause key leakage. | CVSS3: 7.5 | 3% Низкий | больше 8 лет назад |
| CVE-2018-10903 A flaw was found in python-cryptography versions between >=1.9.0 and < ... | CVSS3: 7.5 | 3% Низкий | больше 8 лет назад |
 | openSUSE-SU-2018:3445-1 Security update for python-cryptography | 3% Низкий | около 8 лет назад | |
| SUSE-SU-2022:4044-1 Security update for python-cryptography, python-cryptography-vectors | 3% Низкий | почти 4 года назад | |
| SUSE-SU-2020:0792-1 Security update for python-cffi, python-cryptography | 3% Низкий | больше 6 лет назад | |
| SUSE-SU-2020:0790-1 Security update for python-cffi, python-cryptography, python-xattr | 3% Низкий | больше 6 лет назад | |
| SUSE-SU-2018:3392-1 Security update for python-cryptography | 3% Низкий | около 8 лет назад | |
| ALT-PU-2018-3711 ALT-PU-2018-3711: package `python-module-cryptography` update to version 2.3.0-alt1 | CVSS3: 7.5 | 3% Низкий | больше 8 лет назад |
Уязвимостей на страницу