cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Calling `load_pem_pkcs7_certificates` or `load_der_pkcs7_certificates` could lead to a NULL-pointer dereference and segfault. Exploitation of this vulnerability poses a serious risk of Denial of Service (DoS) for any application attempting to deserialize a PKCS7 blob/certificate. The consequences extend to potential disruptions in system availability and stability. This vulnerability has been patched in version 41.0.6.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-cryptographyUpgrade python3.11-cryptography | May 8, 2024 | Nov 29, 2023 |
| Amazon_linux_2023 | — | Upgrade python3-cryptography-debuginfoUpgrade python-cryptography-debugsourceUpgrade python3-cryptography | Feb 17, 2025 | Nov 28, 2023 |
| Debian | — | Upgrade python-cryptography | Oct 18, 2024 | Nov 29, 2023 |
| Dell Powerstore Dsa2025086 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Feb 20, 2025 |
| Gentoo Linux | — | Upgrade dev-python/cryptography. | Jul 3, 2024 | Nov 29, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-cryptography | Jan 29, 2024 | Nov 29, 2023 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Dec 2, 2025 |
| Oracle_linux | — | Upgrade python3-cryptographyUpgrade python3.11-cryptographyUpgrade python36-cryptography | Jan 18, 2024 | Nov 28, 2023 |
| Redhat_linux | — | Upgrade python3.11-cryptography-debugsourceUpgrade python3-cryptographyUpgrade python3.11-cryptographyUpgrade python3-cryptography-debuginfoUpgrade python-cryptography-debugsourceNo solution existsUpgrade python3.11-cryptography-debuginfo | May 1, 2024 | Nov 29, 2023 |
| Rocky_linux | — | Upgrade python3.11-cryptographyUpgrade python3.11-cryptography-debugsourceUpgrade python3-cryptography-debuginfoUpgrade python3.11-cryptography-debuginfoUpgrade python-cryptography-debugsourceUpgrade python3-cryptography | May 13, 2024 | Nov 29, 2023 |
| Suse | — | Upgrade python3-cryptographyUpgrade python311-cryptographyUpgrade python2-cryptography | Dec 19, 2023 | Nov 29, 2023 |
| Ubuntu | — | Upgrade python3-cryptography | Dec 7, 2023 | Nov 29, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 29, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub