CVE-2023-50782

ADVISORY - github

Summary

A flaw was found in the python-cryptography package. This issue may allow a remote attacker to decrypt captured messages in TLS servers that use RSA key exchanges, which may lead to exposure of confidential or sensitive data.

EPSS Score⁠: 0.00855 (0.750)

Common Weakness Enumeration (CWE)

ADVISORY - nist

CWE-203⁠

Observable Discrepancy

ADVISORY - github

CWE-203⁠

Observable Discrepancy

CWE-208⁠

Observable Timing Discrepancy

CWE-385⁠

Covert Timing Channel

ADVISORY - gitlab

CWE-1035⁠

OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities

CWE-203⁠

Observable Discrepancy

CWE-208⁠

Observable Timing Discrepancy

CWE-937⁠

OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities

ADVISORY - redhat

CWE-208⁠

Observable Timing Discrepancy

CWE-327⁠

Use of a Broken or Risky Cryptographic Algorithm

CWE-385⁠

Covert Timing Channel

Impacted images

Advisories

NIST

CREATED

2 years ago

UPDATED

24 days ago

ADVISORY IDCVE-2023-50782⁠

EXPLOITABILITY SCORE

3.9

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-203⁠

CVSS SCORE

7.5high

GitHub

CREATED

2 years ago

UPDATED

2 months ago

ADVISORY IDGHSA-3ww4-gg4f-jr7f⁠

EXPLOITABILITY SCORE

3.9

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-203⁠CWE-208⁠CWE-385⁠

CVSS SCORE

8.7high

Debian

CREATED

2 years ago

UPDATED

4 days ago

ADVISORY IDCVE-2023-50782⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

Ubuntu

CREATED

2 years ago

UPDATED

1 year ago

ADVISORY IDCVE-2023-50782⁠

EXPLOITABILITY SCORE

3.9

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

7.5medium

GitLab

CREATED

2 years ago

UPDATED

2 years ago

ADVISORY ID

CVE-2023-50782

EXPLOITABILITY SCORE

3.9

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-1035⁠CWE-203⁠CWE-208⁠CWE-937⁠

CVSS SCORE

7.5high

Red Hat

CREATED

2 years ago

UPDATED

3 months ago

ADVISORY IDCVE-2023-50782⁠

EXPLOITABILITY SCORE

3.9

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-208⁠CWE-327⁠CWE-385⁠

CVSS SCORE

7.5medium

Chainguard

CREATED

2 years ago

UPDATED

2 years ago

ADVISORY ID

CGA-3q54-hjw3-8927

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

Chainguard

CREATED

2 years ago

UPDATED

2 years ago

ADVISORY ID

CGA-3xrv-rvqh-mppg

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

Chainguard

CREATED

2 years ago

UPDATED

2 years ago

ADVISORY ID

CGA-45f3-3fmq-7h5w

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

Chainguard

CREATED

2 years ago

UPDATED

2 years ago

ADVISORY ID

CGA-79xc-r2gv-hwvh

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

Chainguard

CREATED

2 years ago

UPDATED

2 years ago

ADVISORY ID

CGA-qwm9-7cvx-g89j

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

Chainguard

CREATED

18 days ago

UPDATED

18 days ago

ADVISORY ID

CGA-v7vx-6v8h-88g9

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

Photon

CREATED

1 year ago

UPDATED

6 months ago

ADVISORY ID

CVE-2023-50782

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

7.5high