python-cryptography 3.2 is vulnerable to Bleichenbacher timing attacks in the RSA decryption API, via timed processing of valid PKCS#1 v1.5 ciphertext.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-cryptography | May 4, 2022 | Jan 11, 2021 |
| Alpine Linux | — | Upgrade py3-cryptography | Aug 22, 2024 | Jan 11, 2021 |
| Amazon Linux Ami 2 | — | Upgrade python2-cryptographyUpgrade python-cryptography-debuginfo | May 20, 2026 | May 20, 2026 |
| Centos_linux | — | Upgrade python-cryptography-debugsourceUpgrade python3-cryptography-debuginfoUpgrade python3-cryptography | Jun 1, 2021 | Jan 11, 2021 |
| Debian | — | Upgrade python-cryptography | Jul 30, 2024 | Jan 11, 2021 |
| Dell Powerstore Dsa2024158 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2024 |
| Dell Powerstore Dsa2024225 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | May 29, 2024 |
| Dell Powerstore Dsa2024287 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Jul 2, 2024 |
| Dell Powerstore Dsa2024462 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Nov 20, 2024 |
| Dell Powerstore Dsa2025050 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jan 28, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-cryptography | May 13, 2024 | Jan 11, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-cryptographyUpgrade python2-cryptography | Jul 23, 2024 | Jan 11, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-cryptography | Apr 9, 2024 | Jan 11, 2021 |
| Oracle Solaris | — | Upgrade library/python/paramiko-37 to version 2.7.2-11.4.33.0.1.94.0 on Solaris 11.4Upgrade library/python/paramiko-27 to version 2.7.2-11.4.33.0.1.94.0 on Solaris 11.4Upgrade library/python/cryptography to version 2.5-11.4.31.0.1.88.4 on Solaris 11.4Upgrade library/python/cryptography-37 to version 2.5-11.4.31.0.1.88.4 on Solaris 11.4Upgrade library/python/cryptography-27 to version 2.5-11.4.31.0.1.88.4 on Solaris 11.4Upgrade library/python/pyopenssl-39 to version 19.0.0-11.4.33.0.1.94.0 on Solaris 11.4Upgrade library/python/pyopenssl-27 to version 19.0.0-11.4.33.0.1.94.0 on Solaris 11.4Upgrade library/python/cryptography-39 to version 2.5-11.4.31.0.1.88.4 on Solaris 11.4Upgrade library/python/paramiko-39 to version 2.7.2-11.4.33.0.1.94.0 on Solaris 11.4Upgrade library/python/paramiko to version 2.7.2-11.4.33.0.1.94.0 on Solaris 11.4Upgrade library/python/pyopenssl to version 19.0.0-11.4.33.0.1.94.0 on Solaris 11.4Upgrade library/python/pyopenssl-37 to version 19.0.0-11.4.33.0.1.94.0 on Solaris 11.4 | Mar 17, 2021 | Jan 11, 2021 |
| Oracle_linux | — | Upgrade python3-cryptography | May 26, 2021 | Oct 25, 2020 |
| Redhat_linux | — | No solution existsUpgrade python-cryptography-debugsourceUpgrade python3-cryptographyUpgrade python3-cryptography-debuginfo | May 21, 2021 | Jan 11, 2021 |
| Rocky_linux | — | Upgrade python-cryptography-debugsourceUpgrade python3-cryptography-debuginfoUpgrade python3-cryptography | Mar 12, 2024 | Jan 11, 2021 |
| Suse | — | Upgrade python3-cryptography-vectorsUpgrade python-cryptographyUpgrade python2-cryptography-vectorsUpgrade python2-cryptographyUpgrade python3-cryptography | Dec 11, 2020 | Nov 3, 2020 |
| Ubuntu | — | Upgrade python3-cryptographyUpgrade python-cryptography | Nov 4, 2020 | Nov 3, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub