Most recent entries from all

bdu:2022-05229

Withdrawn: BELL-CVE-2020-36242 — CVE-2020-36242 does not affect BellSoft software

Withdrawn by the publisher.

BREW-cryptography-CVE-2020-36242

Affected: Homebrew: cryptography

In the cryptography package before 3.3.2 for Python, certain sequences of update calls to symmetrically encrypt multi-GB values could result in an integer overflow and buffer overflow, as demonstrated by the Fernet class.

certfr-2021-avi-505 — De multiples vulnérabilités ont été découvertes dans IBM Spectrum. Elles permettent à un attaquant de provoquer une exé…

certfr-2021-avi-505

EUVD-2026-48075

fkie_cve-2020-36242

GHSA-rhm9-p9w5-fwm7 — PyCA Cryptography symmetrically encrypting large values can lead to integer overflow

Affected: PyPI: cryptography

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. When certain sequences of `update()` calls with large values (multiple GBs) for symetric encryption or decryption occur, it's possible for an integer overflow to happen, leading to mishandling of buffers. This is patched in version 3.3.2 and newer.

gsd-2020-36242

msrc_CVE-2020-36242 — In the cryptography package before 3.3.2 for Python certain sequences of update calls to symmetrically encrypt multi-GB…

msrc_CVE-2020-36242

OESA-2021-1089 — python-cryptography security update

Affected: openEuler:20.03-LTS: python-cryptography, openEuler:20.03-LTS-SP1: python-cryptography

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Security Fix(es): In the cryptography package before 3.3.2 for Python, certain sequences of update calls to symmetrically encrypt multi-GB values could result in an integer overflow and buffer overflow, as demonstrated by the Fernet class.(CVE-2020-36242)

openSUSE-SU-2021:0349-1 — Security update for python-cryptography

Security update for python-cryptography

PYSEC-2021-63

Affected: PyPI: cryptography

RHSA-2021:2239 — Red Hat Security Advisory: Red Hat Virtualization Host security update [ovirt-4.4.6]

python-cryptography: Bleichenbacher timing oracle attack against RSA decryption krb5: unbounded recursion via an ASN.1-encoded Kerberos message in lib/krb5/asn.1/asn1_encode.c may lead to DoS python-cryptography: Large inputs for symmetric encryption can trigger integer overflow leading to buffer overflow

SUSE-RU-2022:4567-1 — Recommended update for python-crcmod, python-cryptography, python-cryptography-vectors

Recommended update for python-crcmod, python-cryptography, python-cryptography-vectors

Withdrawn: UBUNTU-CVE-2020-36242

Withdrawn by the publisher.

Affected: Ubuntu:16.04:LTS: python-cryptography, Ubuntu:18.04:LTS: python-cryptography, Ubuntu:20.04:LTS: python-cryptography

WID-SEC-W-2023-0126 — Oracle MySQL: Mehrere Schwachstellen

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle MySQL ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.