https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 27 Oct 2026 05:15:32 +0000 https://cve.radiocsirt.org/vuln/brew-azure-cli-cve-2018-10903 <p><strong>Affected:</strong> Homebrew: azure-cli</p> <p>A flaw was found in python-cryptography versions between &gt;=1.9.0 and &lt;2.3. The finalize_with_tag API did not enforce a minimum tag length. If a user did not validate the input length prior to passing it to finalize_with_tag an attacker could craft an invalid payload with a shortened tag (e.g. 1 byte) such that they would have a 1 in 256 chance of passing the MAC check. GCM tag forgeries can cause key leakage.</p> <p><strong>Affected:</strong> Homebrew: azure-cli</p> <p>A flaw was found in python-cryptography versions between &gt;=1.9.0 and &lt;2.3. The finalize_with_tag API did not enforce a minimum tag length. If a user did not validate the input length prior to passing it to finalize_with_tag an attacker could craft an invalid payload with a shortened tag (e.g. 1 byte) such that they would have a 1 in 256 chance of passing the MAC check. GCM tag forgeries can cause key leakage.</p> https://cve.radiocsirt.org/vuln/brew-azure-cli-cve-2018-10903 https://cve.radiocsirt.org/vuln/euvd-2026-64973 EUVD-2026-64973 https://cve.radiocsirt.org/vuln/euvd-2026-64973 https://cve.radiocsirt.org/vuln/fkie_cve-2018-10903 <p>A flaw was found in python-cryptography versions between &gt;=1.9.0 and &lt;2.3. The finalize_with_tag API did not enforce a minimum tag length. If a user did not validate the input length prior to passing it to finalize_with_tag an attacker could craft an invalid payload with a shortened tag (e.g. 1 byte) such that they would have a 1 in 256 chance of passing the MAC check. GCM tag forgeries can cause key leakage.</p> <p>A flaw was found in python-cryptography versions between &gt;=1.9.0 and &lt;2.3. The finalize_with_tag API did not enforce a minimum tag length. If a user did not validate the input length prior to passing it to finalize_with_tag an attacker could craft an invalid payload with a shortened tag (e.g. 1 byte) such that they would have a 1 in 256 chance of passing the MAC check. GCM tag forgeries can cause key leakage.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-10903 https://cve.radiocsirt.org/vuln/ghsa-fcf9-3qw3-gxmj <p><strong>Affected:</strong> PyPI: cryptography</p> <p>A flaw was found in python-cryptography versions between &gt;=1.9.0 and &lt;2.3. The finalize_with_tag API did not enforce a minimum tag length. If a user did not validate the input length prior to passing it to finalize_with_tag an attacker could craft an invalid payload with a shortened tag (e.g. 1 byte) such that they would have a 1 in 256 chance of passing the MAC check. GCM tag forgeries can cause key leakage.</p> <p><strong>Affected:</strong> PyPI: cryptography</p> <p>A flaw was found in python-cryptography versions between &gt;=1.9.0 and &lt;2.3. The finalize_with_tag API did not enforce a minimum tag length. If a user did not validate the input length prior to passing it to finalize_with_tag an attacker could craft an invalid payload with a shortened tag (e.g. 1 byte) such that they would have a 1 in 256 chance of passing the MAC check. GCM tag forgeries can cause key leakage.</p> https://cve.radiocsirt.org/vuln/ghsa-fcf9-3qw3-gxmj https://cve.radiocsirt.org/vuln/gsd-2018-10903 gsd-2018-10903 https://cve.radiocsirt.org/vuln/gsd-2018-10903 https://cve.radiocsirt.org/vuln/pysec-2018-52 <p><strong>Affected:</strong> PyPI: cryptography</p> <p>A flaw was found in python-cryptography versions between &gt;=1.9.0 and &lt;2.3. The finalize_with_tag API did not enforce a minimum tag length. If a user did not validate the input length prior to passing it to finalize_with_tag an attacker could craft an invalid payload with a shortened tag (e.g. 1 byte) such that they would have a 1 in 256 chance of passing the MAC check. GCM tag forgeries can cause key leakage.</p> <p><strong>Affected:</strong> PyPI: cryptography</p> <p>A flaw was found in python-cryptography versions between &gt;=1.9.0 and &lt;2.3. The finalize_with_tag API did not enforce a minimum tag length. If a user did not validate the input length prior to passing it to finalize_with_tag an attacker could craft an invalid payload with a shortened tag (e.g. 1 byte) such that they would have a 1 in 256 chance of passing the MAC check. GCM tag forgeries can cause key leakage.</p> https://cve.radiocsirt.org/vuln/pysec-2018-52 https://cve.radiocsirt.org/vuln/rhsa-2018:3600 <p>python-cryptography: GCM tag forgery via truncated tag in finalize_with_tag API</p> <p>python-cryptography: GCM tag forgery via truncated tag in finalize_with_tag API</p> https://cve.radiocsirt.org/vuln/rhsa-2018:3600 https://cve.radiocsirt.org/vuln/suse-su-2018:3392-1 <p>Security update for python-cryptography</p> <p>Security update for python-cryptography</p> https://cve.radiocsirt.org/vuln/suse-su-2018:3392-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-10903 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: python-cryptography</p> <p>A flaw was found in python-cryptography versions between &gt;=1.9.0 and &lt;2.3. The finalize_with_tag API did not enforce a minimum tag length. If a user did not validate the input length prior to passing it to finalize_with_tag an attacker could craft an invalid payload with a shortened tag (e.g. 1 byte) such that they would have a 1 in 256 chance of passing the MAC check. GCM tag forgeries can cause key leakage.</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: python-cryptography</p> <p>A flaw was found in python-cryptography versions between &gt;=1.9.0 and &lt;2.3. The finalize_with_tag API did not enforce a minimum tag length. If a user did not validate the input length prior to passing it to finalize_with_tag an attacker could craft an invalid payload with a shortened tag (e.g. 1 byte) such that they would have a 1 in 256 chance of passing the MAC check. GCM tag forgeries can cause key leakage.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-10903