Skip to content
OpenAdvisories
Medium WID-SEC-2025-2025 1 CVE

Red Hat Enterprise Linux (python-cryptography): Schwachstelle ermöglicht Denial of Service

Published Sep 9, 2025 · Updated Oct 9, 2025 · Revision 2 · de-DE

Vendor: Red Hat Vendor: RESF Product: Enterprise Linux Product: Rocky Linux Platform: Linux

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um einen Denial of Service Angriff durchzuführen.

Product

Red Hat Enterprise Linux (RHEL) ist eine populäre Linux-Distribution.

Vulnerabilities 1

  • High 7.5
    CVE-2024-26130

    cryptography NULL pointer deference with pkcs12.serialize_key_and_certificates when called with a non-matching certificate and private key and an hmac_hash override

    cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Starting in version 38.0.0 and prior to version 42.0.4, if `pkcs12.serialize_key_and_certificates` is called with both a certificate whose public key did n…

    pyca cryptography py3-cassandra-medusa kubeflow-pipelines Debian Ubuntu Wolfi PyPI

Revision history

  1. #2

    Neue Updates von Rocky Enterprise Software Foundation aufgenommen

  2. #1

    Initiale Fassung

References