Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2023-50782

Python-cryptography: bleichenbacher timing oracle attack against rsa decryption - incomplete fix for cve-2020-25659

Description

A flaw was found in the python-cryptography package. This issue may allow a remote attacker to decrypt captured messages in TLS servers that use RSA key exchanges, which may lead to exposure of confidential or sensitive data.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

python-cryptography

Default version status: unaffected

  • 3.2 to < 42.0.0affected

Red Hat Red Hat Ansible Automation Platform 2

Default version status: unaffected

Red Hat Red Hat Enterprise Linux 7

Default version status: unknown

Red Hat Red Hat Enterprise Linux 8

Default version status: unaffected

Red Hat Red Hat Enterprise Linux 8

Default version status: affected

Red Hat Red Hat Enterprise Linux 9

Default version status: unaffected

Red Hat Red Hat Satellite 6

Default version status: unaffected

Red Hat Red Hat Update Infrastructure 4 for Cloud Providers

Default version status: affected

References