cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Calling `load_pem_pkcs7_certificates` or `load_der_pkcs7_certificates` could lead to a NULL-pointer dereference and segfault. Exploitation of this vulnerability poses a serious risk of Denial of Service (DoS) for any application attempting to deserialize a PKCS7 blob/certificate. The consequences extend to potential disruptions in system availability and stability. This vulnerability has been patched in version 41.0.6.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-python3-cryptographyalma-upgrade-python3.11-cryptography | May 8, 2024 | Nov 29, 2023 | |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-python3-cryptographyamazon-linux-2023-upgrade-python3-cryptography-debuginfoamazon-linux-2023-upgrade-python-cryptography-debugsource | Feb 17, 2025 | Nov 28, 2023 | |
| Debian | debian-upgrade-python-cryptography | Oct 18, 2024 | Nov 29, 2023 | |
| Dell Powerstore Dsa2025086 | dell-powerstoreos-upgrade-latest | Oct 23, 2025 | Feb 20, 2025 | |
| Gentoo Linux | gentoo-linux-upgrade-dev-python-cryptography | Jul 3, 2024 | Nov 29, 2023 | |
| Huawei Euleros 2_0_sp11 | huawei-euleros-2_0_sp11-upgrade-python3-cryptography | Jan 29, 2024 | Nov 29, 2023 | |
| Nutanix Ahv | nutanix-ahv-upgrade-latest | Jun 5, 2026 | Dec 2, 2025 | |
| Oracle_linux | — | oracle-linux-upgrade-python3-11-cryptographyoracle-linux-upgrade-python36-cryptographyoracle-linux-upgrade-python3-cryptography | Jan 18, 2024 | Nov 28, 2023 |
| Redhat_linux | redhat-upgrade-python-cryptography-debugsourceredhat-upgrade-python3-11-cryptographyredhat-upgrade-python3-11-cryptography-debuginforedhat-upgrade-python3-11-cryptography-debugsourceredhat-upgrade-python3-cryptographyredhat-upgrade-python3-cryptography-debuginfo | May 1, 2024 | Nov 29, 2023 | |
| Rocky_linux | rocky-upgrade-python-cryptography-debugsourcerocky-upgrade-python3-cryptographyrocky-upgrade-python3-cryptography-debuginforocky-upgrade-python3.11-cryptographyrocky-upgrade-python3.11-cryptography-debuginforocky-upgrade-python3.11-cryptography-debugsource | May 13, 2024 | Nov 29, 2023 | |
| Suse | — | suse-upgrade-python2-cryptographysuse-upgrade-python3-cryptographysuse-upgrade-python311-cryptography | Dec 19, 2023 | Nov 29, 2023 |
| Ubuntu | ubuntu-upgrade-python-cryptographyubuntu-upgrade-python3-cryptography | Dec 7, 2023 | Nov 29, 2023 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Nov 29, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub