The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A flaw was found in python-cryptography versions between >=1.9.0 and <2.3. The finalize_with_tag API did not enforce a minimum tag length. If a user did not validate the input length prior to passing it to finalize_with_tag an attacker could craft an invalid payload with a shortened tag (e.g. 1 byte) such that they would have a 1 in 256 chance of passing the MAC check. GCM tag forgeries can cause key leakage.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade python-cryptography | Jul 30, 2024 | Jul 30, 2018 |
| Dell Powerstore Dsa2023173 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Jun 21, 2023 |
| Freebsd | — | Upgrade py27-cryptographyUpgrade py35-cryptographyUpgrade py36-cryptographyUpgrade py37-cryptographyUpgrade py34-cryptography | Aug 6, 2018 | Aug 6, 2018 |
| Suse | — | Upgrade python-xattrUpgrade python-cryptographyUpgrade python3-cffiUpgrade python2-cryptographyUpgrade python-cffiUpgrade python3-cryptography | Oct 26, 2018 | Jul 30, 2018 |
| Ubuntu | — | Upgrade python3-cryptographyUpgrade python-cryptography | Aug 2, 2018 | Jul 23, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 30, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub