Dolan
@0xdolan.bsky.social
Junior Python Developer • In love with #Linux • CTF player • 🐍 🐧 🐼
Reposted by Dolan
Python Cryptography advisory: CVE-2023-49083 NULL-dereference when loading PKCS7 certificates
oss-sec: Python Cryptography advisory: CVE-2023-49083 NULL-dereference when loading PKCS7 certificates
Posted by Alan Coopersmith on Nov 29 https://github.com/pyca/cryptography/security/advisories/GHSA-jfhm-5ghh-2f97
reports:
-------------------------------------------------------------------------------
Affected versions >= 3.1, < 41.0.6
Patched versions >=41.0.6
Summary
Calling load_pem_pkcs7_certificates or load_der_pkcs7_certificates could lead to
a NULL-pointer dereference and segfault.
PoC
Here is a Python code that triggers the issue:
from...
seclists.org
November 29, 2023 at 7:57 PM
Python Cryptography advisory: CVE-2023-49083 NULL-dereference when loading PKCS7 certificates