CVE-2023-38325 - CVE | ByteOS Network

CVE Vulnerability Details :

CVE-2023-38325

PUBLISHED

More Info Official Page

Assigner-mitre

Assigner Org ID-8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At-14 Jul, 2023 | 00:00

Updated At-30 Oct, 2024 | 16:00

▼CVE Numbering Authority (CNA)

The cryptography package before 41.0.2 for Python mishandles SSH certificates that have critical options.

Affected Products

Vendor

Product

Versions

Affected

n/a

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
https://github.com/pyca/cryptography/issues/9207	N/A
https://github.com/pyca/cryptography/pull/9208	N/A
https://pypi.org/project/cryptography/#history	N/A
https://github.com/pyca/cryptography/compare/41.0.1...41.0.2	N/A
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMCCTYY3CSNQBFFYYC5DAV6KATHWCUZK/	vendor-advisory
https://security.netapp.com/advisory/ntap-20230824-0010/	N/A

Hyperlink: https://github.com/pyca/cryptography/issues/9207

Resource: N/A

Hyperlink: https://github.com/pyca/cryptography/pull/9208

Resource: N/A

Hyperlink: https://pypi.org/project/cryptography/#history

Resource: N/A

Hyperlink: https://github.com/pyca/cryptography/compare/41.0.1...41.0.2

Resource: N/A

Hyperlink: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMCCTYY3CSNQBFFYYC5DAV6KATHWCUZK/

Resource:

vendor-advisory

Hyperlink: https://security.netapp.com/advisory/ntap-20230824-0010/

Resource: N/A

▼Authorized Data Publishers (ADP)

1. CVE Program Container

References

Hyperlink	Resource
https://github.com/pyca/cryptography/issues/9207	x_transferred
https://github.com/pyca/cryptography/pull/9208	x_transferred
https://pypi.org/project/cryptography/#history	x_transferred
https://github.com/pyca/cryptography/compare/41.0.1...41.0.2	x_transferred
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMCCTYY3CSNQBFFYYC5DAV6KATHWCUZK/	vendor-advisory x_transferred
https://security.netapp.com/advisory/ntap-20230824-0010/	x_transferred

Hyperlink: https://github.com/pyca/cryptography/issues/9207

Resource:

x_transferred

Hyperlink: https://github.com/pyca/cryptography/pull/9208

Resource:

x_transferred

Hyperlink: https://pypi.org/project/cryptography/#history

Resource:

x_transferred

Hyperlink: https://github.com/pyca/cryptography/compare/41.0.1...41.0.2

Resource:

x_transferred

Hyperlink: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMCCTYY3CSNQBFFYYC5DAV6KATHWCUZK/

Resource:

vendor-advisory

x_transferred

Hyperlink: https://security.netapp.com/advisory/ntap-20230824-0010/

Resource:

x_transferred

2. CISA ADP Vulnrichment

Metrics Other Info