DirectorySecurity Advisories
Sign In
Security Advisories

CGA-3q54-hjw3-8927

Published

Last updated

https://images.chainguard.dev/security/CGA-3q54-hjw3-8927
Package

az

Latest Update
Fixed
Fixed Version

2.57.0-r0

Aliases
  • CVE-2023-50782
  • GHSA-3ww4-gg4f-jr7f

Severity

7.5

High

CVSS V3

Summary

Python Cryptography package vulnerable to Bleichenbacher timing oracle attack

Description

A flaw was found in the python-cryptography package. This issue may allow a remote attacker to decrypt captured messages in TLS servers that use RSA key exchanges, which may lead to exposure of confidential or sensitive data.

References

Updates


Safe Source for Open Sourceâ„¢
Media KitContact Us
© 2024 Chainguard. All Rights Reserved.
Private PolicyTerms of Use

Product

Chainguard Images