Vulnerability-Lookup

RHSA-2026:55543

Vulnerability from csaf_redhat - Published: 2026-08-17 09:22 - Updated: 2026-09-14 14:53

Summary

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Severity

Important

Notes

Topic: An update for Red Hat Hardened Images RPMs is now available.

Details: This update includes the following RPMs: python-cryptography: * python3-cryptography-50.0.0-1.hum1 (aarch64, x86_64) * python-cryptography-50.0.0-1.hum1.src (src)

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2026-54876

A flaw was found in OpenSSL. A malicious TLS (Transport Layer Security) server can exploit this vulnerability by sending a specially crafted OCSP (Online Certificate Status Protocol) response during the X.509 certificate chain verification process. This can lead to a memory leak in client applications that have enabled OCSP response checking. Repeated connections to a malicious server could exhaust the client's memory, ultimately resulting in a Denial of Service (DoS).

3.7 (Low)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

CWE-772 - Missing Release of Resource after Effective Lifetime

Affected products

Fixed 3 products

Product	Version	Remediation
Unresolved product id: Red Hat Hardened Images:python-cryptography-main@aarch64	—	Vendor Fix fix
Unresolved product id: Red Hat Hardened Images:python-cryptography-main@src	—	Vendor Fix fix
Unresolved product id: Red Hat Hardened Images:python-cryptography-main@x86_64	—	Vendor Fix fix

Threats

Impact Low

CVE-2026-69247

A flaw was found in cryptography, a Python package for cryptographic primitives. This vulnerability, known as a Bleichenbacher oracle, arises during PKCS#7 EnvelopedData decryption. An attacker can exploit distinguishable error messages and timing differences during decryption to gain information about the content-encryption key. Exploitation requires a high-volume service, such as an S/MIME gateway, that automatically decrypts untrusted data matching a victim's certificate. Successful exploitation could lead to the disclosure of sensitive encryption keys, allowing an attacker to decrypt confidential communications.

5.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE-208 - Observable Timing Discrepancy

Affected products

Fixed 3 products, the same list as for CVE-2026-54876

Threats

Impact Moderate

CVE-2026-69248

A flaw was found in python-cryptography. This vulnerability arises from incorrect handling of wildcard Domain Name System (DNS) names during certificate validation. Specifically, the verifier may accept a certificate with a broad wildcard DNS name (e.g., *.example.com) even when a more restrictive name (e.g., foo.example.com) is permitted by an intermediate Certificate Authority (CA). This misinterpretation allows an attacker to bypass certificate validation, potentially leading to the acceptance of invalid certificates and enabling unauthorized access or spoofing.

7.4 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

CWE-295 - Improper Certificate Validation

Affected products

Fixed 3 products, the same list as for CVE-2026-54876

Threats

Impact Moderate

CVE-2026-69249

A flaw was found in python-cryptography. When processing invalid certificate chains that include duplicate self-signed certificates, the system recursively invokes the same certificate, leading to an exponential increase in processing time. A remote attacker could exploit this by providing a specially crafted certificate chain, causing resource exhaustion and a denial of service (DoS) condition, making the system unavailable. The integrity of the system's validation is not affected, only its availability.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 3 products, the same list as for CVE-2026-54876

Threats

Impact Important

References

37 references

URL	Category
https://access.redhat.com/errata/RHSA-2026:55543	self
https://images.redhat.com/	external
https://access.redhat.com/security/cve/CVE-2026-54876	external
https://access.redhat.com/security/updates/classi…	external
https://access.redhat.com/security/cve/CVE-2026-75803	external
https://access.redhat.com/security/cve/CVE-2026-69248	external
https://access.redhat.com/security/cve/CVE-2026-69249	external
https://access.redhat.com/security/cve/CVE-2026-69247	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2026-54876	self
https://bugzilla.redhat.com/show_bug.cgi?id=2511600	external
https://www.cve.org/CVERecord?id=CVE-2026-54876	external
https://nvd.nist.gov/vuln/detail/CVE-2026-54876	external
https://github.com/openssl/openssl/commit/155b5fe…	external
https://github.com/openssl/openssl/commit/d8c5104…	external
https://openssl-library.org/news/secadv/20260805.txt	external
https://access.redhat.com/security/cve/CVE-2026-69247	self
https://bugzilla.redhat.com/show_bug.cgi?id=2510835	external
https://www.cve.org/CVERecord?id=CVE-2026-69247	external
https://nvd.nist.gov/vuln/detail/CVE-2026-69247	external
https://github.com/pyca/cryptography/commit/53fcc…	external
https://github.com/pyca/cryptography/pull/15369	external
https://github.com/pyca/cryptography/security/adv…	external
https://access.redhat.com/security/cve/CVE-2026-69248	self
https://bugzilla.redhat.com/show_bug.cgi?id=2510830	external
https://www.cve.org/CVERecord?id=CVE-2026-69248	external
https://nvd.nist.gov/vuln/detail/CVE-2026-69248	external
https://github.com/pyca/cryptography/commit/4d035…	external
https://github.com/pyca/cryptography/pull/14888	external
https://github.com/pyca/cryptography/security/adv…	external
https://access.redhat.com/security/cve/CVE-2026-69249	self
https://bugzilla.redhat.com/show_bug.cgi?id=2510815	external
https://www.cve.org/CVERecord?id=CVE-2026-69249	external
https://nvd.nist.gov/vuln/detail/CVE-2026-69249	external
https://github.com/pyca/cryptography/commit/4a12c…	external
https://github.com/pyca/cryptography/pull/14960	external
https://github.com/pyca/cryptography/security/adv…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for Red Hat Hardened Images RPMs is now available.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "This update includes the following RPMs:\n\npython-cryptography:\n  * python3-cryptography-50.0.0-1.hum1 (aarch64, x86_64)\n  * python-cryptography-50.0.0-1.hum1.src (src)",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:55543",
        "url": "https://access.redhat.com/errata/RHSA-2026:55543"
      },
      {
        "category": "external",
        "summary": "https://images.redhat.com/",
        "url": "https://images.redhat.com/"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-54876",
        "url": "https://access.redhat.com/security/cve/CVE-2026-54876"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-75803",
        "url": "https://access.redhat.com/security/cve/CVE-2026-75803"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-69248",
        "url": "https://access.redhat.com/security/cve/CVE-2026-69248"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-69249",
        "url": "https://access.redhat.com/security/cve/CVE-2026-69249"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-69247",
        "url": "https://access.redhat.com/security/cve/CVE-2026-69247"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_55543.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update",
    "tracking": {
      "current_release_date": "2026-09-14T14:53:31+00:00",
      "generator": {
        "date": "2026-09-14T14:53:31+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.21"
        }
      },
      "id": "RHSA-2026:55543",
      "initial_release_date": "2026-08-17T09:22:07+00:00",
      "revision_history": [
        {
          "date": "2026-08-17T09:22:07+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-09-08T10:34:36+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-09-14T14:53:31+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Hardened Images",
                "product": {
                  "name": "Red Hat Hardened Images",
                  "product_id": "Red Hat Hardened Images",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:hummingbird:1"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Hardened Images"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "python-cryptography-main@src",
                "product": {
                  "name": "python-cryptography-main@src",
                  "product_id": "python-cryptography-main@src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python-cryptography@50.0.0-1.hum1?arch=src\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-source-rpms"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "python-cryptography-main@aarch64",
                "product": {
                  "name": "python-cryptography-main@aarch64",
                  "product_id": "python-cryptography-main@aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3-cryptography@50.0.0-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "python-cryptography-main@x86_64",
                "product": {
                  "name": "python-cryptography-main@x86_64",
                  "product_id": "python-cryptography-main@x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3-cryptography@50.0.0-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-cryptography-main@aarch64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:python-cryptography-main@aarch64"
        },
        "product_reference": "python-cryptography-main@aarch64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-cryptography-main@src as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:python-cryptography-main@src"
        },
        "product_reference": "python-cryptography-main@src",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python-cryptography-main@x86_64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:python-cryptography-main@x86_64"
        },
        "product_reference": "python-cryptography-main@x86_64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-54876",
      "cwe": {
        "id": "CWE-772",
        "name": "Missing Release of Resource after Effective Lifetime"
      },
      "discovery_date": "2026-08-05T15:21:19.015952+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2511600"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in OpenSSL. A malicious TLS (Transport Layer Security) server can exploit this vulnerability by sending a specially crafted OCSP (Online Certificate Status Protocol) response during the X.509 certificate chain verification process. This can lead to a memory leak in client applications that have enabled OCSP response checking. Repeated connections to a malicious server could exhaust the client\u0027s memory, ultimately resulting in a Denial of Service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "openssl: OpenSSL: Memory leak leads to Denial of Service in OCSP response checking",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:python-cryptography-main@aarch64",
          "Red Hat Hardened Images:python-cryptography-main@src",
          "Red Hat Hardened Images:python-cryptography-main@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-54876"
        },
        {
          "category": "external",
          "summary": "RHBZ#2511600",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2511600"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-54876",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-54876"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-54876",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-54876"
        },
        {
          "category": "external",
          "summary": "https://github.com/openssl/openssl/commit/155b5fe0f93365e6df1c56ee3606b121080c6c12",
          "url": "https://github.com/openssl/openssl/commit/155b5fe0f93365e6df1c56ee3606b121080c6c12"
        },
        {
          "category": "external",
          "summary": "https://github.com/openssl/openssl/commit/d8c51048ac037a21bae0f41cad7a3920dc7f3638",
          "url": "https://github.com/openssl/openssl/commit/d8c51048ac037a21bae0f41cad7a3920dc7f3638"
        },
        {
          "category": "external",
          "summary": "https://openssl-library.org/news/secadv/20260805.txt",
          "url": "https://openssl-library.org/news/secadv/20260805.txt"
        }
      ],
      "release_date": "2026-08-05T13:59:36.466000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-17T09:22:07+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:python-cryptography-main@aarch64",
            "Red Hat Hardened Images:python-cryptography-main@src",
            "Red Hat Hardened Images:python-cryptography-main@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:55543"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:python-cryptography-main@aarch64",
            "Red Hat Hardened Images:python-cryptography-main@src",
            "Red Hat Hardened Images:python-cryptography-main@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "openssl: OpenSSL: Memory leak leads to Denial of Service in OCSP response checking"
    },
    {
      "cve": "CVE-2026-69247",
      "cwe": {
        "id": "CWE-208",
        "name": "Observable Timing Discrepancy"
      },
      "discovery_date": "2026-08-03T22:03:10.728292+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2510835"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in cryptography, a Python package for cryptographic primitives. This vulnerability, known as a Bleichenbacher oracle, arises during PKCS#7 EnvelopedData decryption. An attacker can exploit distinguishable error messages and timing differences during decryption to gain information about the content-encryption key. Exploitation requires a high-volume service, such as an S/MIME gateway, that automatically decrypts untrusted data matching a victim\u0027s certificate. Successful exploitation could lead to the disclosure of sensitive encryption keys, allowing an attacker to decrypt confidential communications.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "python-cryptography: python-cryptography: PKCS#7 EnvelopedData decryption exposes a Bleichenbacher oracle through distinguishable errors and timing",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat rates this Moderate (CVSS 3.1 5.9). Exploitation requires an application that decrypts attacker-supplied PKCS#7 EnvelopedData via pkcs7_decrypt_* and leaks errors or timing. GitHub CNA CVSS 4.0 8.2 assumes that oracle is readily available.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:python-cryptography-main@aarch64",
          "Red Hat Hardened Images:python-cryptography-main@src",
          "Red Hat Hardened Images:python-cryptography-main@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-69247"
        },
        {
          "category": "external",
          "summary": "RHBZ#2510835",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2510835"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-69247",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-69247"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-69247",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-69247"
        },
        {
          "category": "external",
          "summary": "https://github.com/pyca/cryptography/commit/53fccd93413a8d7f07d6d8999681f27b75cffa3f",
          "url": "https://github.com/pyca/cryptography/commit/53fccd93413a8d7f07d6d8999681f27b75cffa3f"
        },
        {
          "category": "external",
          "summary": "https://github.com/pyca/cryptography/pull/15369",
          "url": "https://github.com/pyca/cryptography/pull/15369"
        },
        {
          "category": "external",
          "summary": "https://github.com/pyca/cryptography/security/advisories/GHSA-g6cj-pr64-35w5",
          "url": "https://github.com/pyca/cryptography/security/advisories/GHSA-g6cj-pr64-35w5"
        }
      ],
      "release_date": "2026-08-03T21:16:32.047000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-17T09:22:07+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:python-cryptography-main@aarch64",
            "Red Hat Hardened Images:python-cryptography-main@src",
            "Red Hat Hardened Images:python-cryptography-main@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:55543"
        },
        {
          "category": "workaround",
          "details": "The vulnerable APIs were introduced in cryptography 44.0.0 and fixed in 50.0.0.",
          "product_ids": [
            "Red Hat Hardened Images:python-cryptography-main@aarch64",
            "Red Hat Hardened Images:python-cryptography-main@src",
            "Red Hat Hardened Images:python-cryptography-main@x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:python-cryptography-main@aarch64",
            "Red Hat Hardened Images:python-cryptography-main@src",
            "Red Hat Hardened Images:python-cryptography-main@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "python-cryptography: python-cryptography: PKCS#7 EnvelopedData decryption exposes a Bleichenbacher oracle through distinguishable errors and timing"
    },
    {
      "cve": "CVE-2026-69248",
      "cwe": {
        "id": "CWE-295",
        "name": "Improper Certificate Validation"
      },
      "discovery_date": "2026-08-03T22:02:52.455582+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2510830"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in python-cryptography. This vulnerability arises from incorrect handling of wildcard Domain Name System (DNS) names during certificate validation. Specifically, the verifier may accept a certificate with a broad wildcard DNS name (e.g., *.example.com) even when a more restrictive name (e.g., foo.example.com) is permitted by an intermediate Certificate Authority (CA). This misinterpretation allows an attacker to bypass certificate validation, potentially leading to the acceptance of invalid certificates and enabling unauthorized access or spoofing.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "python-cryptography: python-cryptography: python-cryptography verifier accepts wildcard DNS names allowing escape from permittedSubtrees",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat rates this Moderate (CVSS 3.1 7.4). Exploitation requires a DNS-constrained intermediate CA that issues a broader wildcard leaf SAN than its permitted subtree, which Web PKI does not use. GitHub CNA CVSS 4.0 is 6.9. This is distinct from CVE-2026-34073 (wildcard SAN vs peer-name constraints, fixed in 46.0.6).",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:python-cryptography-main@aarch64",
          "Red Hat Hardened Images:python-cryptography-main@src",
          "Red Hat Hardened Images:python-cryptography-main@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-69248"
        },
        {
          "category": "external",
          "summary": "RHBZ#2510830",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2510830"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-69248",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-69248"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-69248",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-69248"
        },
        {
          "category": "external",
          "summary": "https://github.com/pyca/cryptography/commit/4d035a4225965edeffd312079a510ef25fcfdcb2",
          "url": "https://github.com/pyca/cryptography/commit/4d035a4225965edeffd312079a510ef25fcfdcb2"
        },
        {
          "category": "external",
          "summary": "https://github.com/pyca/cryptography/pull/14888",
          "url": "https://github.com/pyca/cryptography/pull/14888"
        },
        {
          "category": "external",
          "summary": "https://github.com/pyca/cryptography/security/advisories/GHSA-m2h6-j472-rp4c",
          "url": "https://github.com/pyca/cryptography/security/advisories/GHSA-m2h6-j472-rp4c"
        }
      ],
      "release_date": "2026-08-03T21:21:43.710000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-17T09:22:07+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:python-cryptography-main@aarch64",
            "Red Hat Hardened Images:python-cryptography-main@src",
            "Red Hat Hardened Images:python-cryptography-main@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:55543"
        },
        {
          "category": "workaround",
          "details": "The Rust PolicyBuilder verifier was introduced in cryptography 42.0.0 and this issue was fixed in 49.0.0.",
          "product_ids": [
            "Red Hat Hardened Images:python-cryptography-main@aarch64",
            "Red Hat Hardened Images:python-cryptography-main@src",
            "Red Hat Hardened Images:python-cryptography-main@x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:python-cryptography-main@aarch64",
            "Red Hat Hardened Images:python-cryptography-main@src",
            "Red Hat Hardened Images:python-cryptography-main@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "python-cryptography: python-cryptography: python-cryptography verifier accepts wildcard DNS names allowing escape from permittedSubtrees"
    },
    {
      "cve": "CVE-2026-69249",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-08-03T22:01:50.119035+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2510815"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in python-cryptography. When processing invalid certificate chains that include duplicate self-signed certificates, the system recursively invokes the same certificate, leading to an exponential increase in processing time. A remote attacker could exploit this by providing a specially crafted certificate chain, causing resource exhaustion and a denial of service (DoS) condition, making the system unavailable. The integrity of the system\u0027s validation is not affected, only its availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "python-cryptography: python-cryptography: Duplicate self-signed intermediates can cause exponential path-building",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat rates this Important (CVSS 3.1 7.5). Duplicate self-signed intermediates can make PolicyBuilder path-building take seconds per request. GitHub CNA CVSS 4.0 is 8.7.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:python-cryptography-main@aarch64",
          "Red Hat Hardened Images:python-cryptography-main@src",
          "Red Hat Hardened Images:python-cryptography-main@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-69249"
        },
        {
          "category": "external",
          "summary": "RHBZ#2510815",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2510815"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-69249",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-69249"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-69249",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-69249"
        },
        {
          "category": "external",
          "summary": "https://github.com/pyca/cryptography/commit/4a12cf49675a184e47f912b00b04f3a629283582",
          "url": "https://github.com/pyca/cryptography/commit/4a12cf49675a184e47f912b00b04f3a629283582"
        },
        {
          "category": "external",
          "summary": "https://github.com/pyca/cryptography/pull/14960",
          "url": "https://github.com/pyca/cryptography/pull/14960"
        },
        {
          "category": "external",
          "summary": "https://github.com/pyca/cryptography/security/advisories/GHSA-jwv3-5hgf-82ww",
          "url": "https://github.com/pyca/cryptography/security/advisories/GHSA-jwv3-5hgf-82ww"
        }
      ],
      "release_date": "2026-08-03T21:26:45.826000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-17T09:22:07+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:python-cryptography-main@aarch64",
            "Red Hat Hardened Images:python-cryptography-main@src",
            "Red Hat Hardened Images:python-cryptography-main@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:55543"
        },
        {
          "category": "workaround",
          "details": "The Rust PolicyBuilder verifier was introduced in cryptography 42.0.0 and this issue was fixed in 49.0.0 (signature-check budget of 128).",
          "product_ids": [
            "Red Hat Hardened Images:python-cryptography-main@aarch64",
            "Red Hat Hardened Images:python-cryptography-main@src",
            "Red Hat Hardened Images:python-cryptography-main@x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:python-cryptography-main@aarch64",
            "Red Hat Hardened Images:python-cryptography-main@src",
            "Red Hat Hardened Images:python-cryptography-main@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "python-cryptography: python-cryptography: Duplicate self-signed intermediates can cause exponential path-building"
    }
  ]
}

CVE-2026-54876 (GCVE-0-2026-54876)

Vulnerability from cvelistv5 – Published: 2026-08-05 13:59 – Updated: 2026-08-05 19:31

Title

Client-Side Memory Leak in OCSP Response Checking

Summary

Issue summary: A malicious TLS server can cause a memory leak in a TLS client that has enabled OCSP response checking by sending an OCSP response that contains no single response entries. Impact summary: An attacker can leak an attacker-tunable amount of memory per TLS handshake in a victim client application. A long-running client that repeatedly connects to a malicious server can have its memory exhausted, resulting in a Denial of Service. CWE: CWE-401: Missing Release of Memory after Effective Lifetime Description: The affected function is called during X.509 certificate chain verification when OCSP response checking is enabled with the X509_V_FLAG_OCSP_RESP_CHECK or X509_V_FLAG_OCSP_RESP_CHECK_ALL verification flags, for example when a TLS client verifies an OCSP response stapled into the TLS handshake by the server. When the received BasicOCSPResponse contains an empty SEQUENCE OF SingleResponse, which is permitted on the wire and accepted by the OpenSSL decoder, the OCSP_BASICRESP structure allocated by OCSP_response_get1_basic() was not freed because an early return bypassed the cleanup code at the end of the function. The amount of memory leaked per handshake can be amplified by the attacker by padding the certs field of the BasicOCSPResponse with bogus certificates, which are parsed and stored in the leaked structure before the empty response check triggers the early return. A long-running TLS client that repeatedly connects to a malicious server can have its memory exhausted over time. OCSP response checking is not enabled by default. Only client applications that explicitly enable the OCSP response check verification flags are affected. FIPS impact: no The FIPS modules in 4.0 and 3.6 are not affected by this issue as the affected code is outside the OpenSSL FIPS module boundary.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-05 19:31 UTC

CWE

CWE-401 - Missing Release of Memory after Effective Lifetime

Assigner

openssl mitre root

References

4 references

URL	Tags
https://openssl-library.org/news/secadv/20260805.txt	vendor-advisory
https://github.com/openssl/openssl/commit/d8c5104…	patch
https://github.com/openssl/openssl/commit/155b5fe…	patch
http://www.openwall.com/lists/oss-security/2026/08/05/8

Impacted products

1 product

Vendor	Product	Version
OpenSSL	OpenSSL	Affected: 4.0.0 , < 4.0.2 (semver) Affected: 3.6.0 , < 3.6.4 (semver)

Date Public

2026-08-05 11:43

Credits

Bhabani Sankar Das Zhenzhe Shao Mounir Idrassi

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2026-08-05T16:32:57.957Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://www.openwall.com/lists/oss-security/2026/08/05/8"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-54876",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-05T19:31:37.065781Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-05T19:31:51.591Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "OpenSSL",
          "vendor": "OpenSSL",
          "versions": [
            {
              "lessThan": "4.0.2",
              "status": "affected",
              "version": "4.0.0",
              "versionType": "semver"
            },
            {
              "lessThan": "3.6.4",
              "status": "affected",
              "version": "3.6.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "Bhabani Sankar Das"
        },
        {
          "lang": "en",
          "type": "reporter",
          "value": "Zhenzhe Shao"
        },
        {
          "lang": "en",
          "type": "remediation developer",
          "value": "Mounir Idrassi"
        }
      ],
      "datePublic": "2026-08-05T11:43:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Issue summary: A malicious TLS server can cause a memory leak in a TLS\u003cbr\u003eclient that has enabled OCSP response checking by sending an OCSP\u003cbr\u003eresponse that contains no single response entries.\u003cbr\u003e\u003cbr\u003eImpact summary: An attacker can leak an attacker-tunable amount of memory\u003cbr\u003eper TLS handshake in a victim client application. A long-running client\u003cbr\u003ethat repeatedly connects to a malicious server can have its memory\u003cbr\u003eexhausted, resulting in a Denial of Service.\u003cbr\u003e\u003cbr\u003eCWE: CWE-401: Missing Release of Memory after Effective Lifetime\u003cbr\u003e\u003cbr\u003eDescription: The affected function is called during X.509 certificate\u003cbr\u003echain verification when OCSP response checking is enabled\u003cbr\u003ewith the X509_V_FLAG_OCSP_RESP_CHECK or X509_V_FLAG_OCSP_RESP_CHECK_ALL\u003cbr\u003everification flags, for example when a TLS client verifies an OCSP\u003cbr\u003eresponse stapled into the TLS handshake by the server.\u003cbr\u003e\u003cbr\u003eWhen the received BasicOCSPResponse contains an empty SEQUENCE OF\u003cbr\u003eSingleResponse, which is permitted on the wire and accepted by the\u003cbr\u003eOpenSSL decoder, the OCSP_BASICRESP structure allocated by\u003cbr\u003eOCSP_response_get1_basic() was not freed because an early return\u003cbr\u003ebypassed the cleanup code at the end of the function.\u003cbr\u003e\u003cbr\u003eThe amount of memory leaked per handshake can be amplified by the\u003cbr\u003eattacker by padding the certs field of the BasicOCSPResponse with\u003cbr\u003ebogus certificates, which are parsed and stored in the leaked\u003cbr\u003estructure before the empty response check triggers the early return.\u003cbr\u003eA long-running TLS client that repeatedly connects to a malicious\u003cbr\u003eserver can have its memory exhausted over time.\u003cbr\u003e\u003cbr\u003eOCSP response checking is not enabled by default. Only client\u003cbr\u003eapplications that explicitly enable the OCSP response check\u003cbr\u003everification flags are affected.\u003cbr\u003e\u003cbr\u003eFIPS impact: no\u003cbr\u003e\u003cbr\u003eThe FIPS modules in 4.0 and 3.6 are not affected by this issue as the\u003cbr\u003eaffected code is outside the OpenSSL FIPS module boundary."
            }
          ],
          "value": "Issue summary: A malicious TLS server can cause a memory leak in a TLS\nclient that has enabled OCSP response checking by sending an OCSP\nresponse that contains no single response entries.\n\nImpact summary: An attacker can leak an attacker-tunable amount of memory\nper TLS handshake in a victim client application. A long-running client\nthat repeatedly connects to a malicious server can have its memory\nexhausted, resulting in a Denial of Service.\n\nCWE: CWE-401: Missing Release of Memory after Effective Lifetime\n\nDescription: The affected function is called during X.509 certificate\nchain verification when OCSP response checking is enabled\nwith the X509_V_FLAG_OCSP_RESP_CHECK or X509_V_FLAG_OCSP_RESP_CHECK_ALL\nverification flags, for example when a TLS client verifies an OCSP\nresponse stapled into the TLS handshake by the server.\n\nWhen the received BasicOCSPResponse contains an empty SEQUENCE OF\nSingleResponse, which is permitted on the wire and accepted by the\nOpenSSL decoder, the OCSP_BASICRESP structure allocated by\nOCSP_response_get1_basic() was not freed because an early return\nbypassed the cleanup code at the end of the function.\n\nThe amount of memory leaked per handshake can be amplified by the\nattacker by padding the certs field of the BasicOCSPResponse with\nbogus certificates, which are parsed and stored in the leaked\nstructure before the empty response check triggers the early return.\nA long-running TLS client that repeatedly connects to a malicious\nserver can have its memory exhausted over time.\n\nOCSP response checking is not enabled by default. Only client\napplications that explicitly enable the OCSP response check\nverification flags are affected.\n\nFIPS impact: no\n\nThe FIPS modules in 4.0 and 3.6 are not affected by this issue as the\naffected code is outside the OpenSSL FIPS module boundary."
        }
      ],
      "metrics": [
        {
          "format": "other",
          "other": {
            "content": {
              "text": "Low"
            },
            "type": "https://openssl-library.org/policies/general/security-policy/"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-401",
              "description": "CWE-401 Missing Release of Memory after Effective Lifetime",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T13:59:36.466Z",
        "orgId": "3a12439a-ef3a-4c79-92e6-6081a721f1e5",
        "shortName": "openssl"
      },
      "references": [
        {
          "name": "OpenSSL Advisory",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://openssl-library.org/news/secadv/20260805.txt"
        },
        {
          "name": "4.0.2 git commit",
          "tags": [
            "patch"
          ],
          "url": "https://github.com/openssl/openssl/commit/d8c51048ac037a21bae0f41cad7a3920dc7f3638"
        },
        {
          "name": "3.6.4 git commit",
          "tags": [
            "patch"
          ],
          "url": "https://github.com/openssl/openssl/commit/155b5fe0f93365e6df1c56ee3606b121080c6c12"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Client-Side Memory Leak in OCSP Response Checking",
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3a12439a-ef3a-4c79-92e6-6081a721f1e5",
    "assignerShortName": "openssl",
    "cveId": "CVE-2026-54876",
    "datePublished": "2026-08-05T13:59:36.466Z",
    "dateReserved": "2026-06-16T10:18:08.636Z",
    "dateUpdated": "2026-08-05T19:31:51.591Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-69247 (GCVE-0-2026-69247)

Vulnerability from cvelistv5 – Published: 2026-08-03 21:16 – Updated: 2026-08-04 14:09

Title

cryptography: PKCS#7 EnvelopedData decryption exposes a Bleichenbacher oracle through distinguishable errors and timing

Summary

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. From 44.0.0 until 50.0.0, pkcs7_decrypt_der, pkcs7_decrypt_pem, and pkcs7_decrypt_smime reported the outcome of decrypting a RecipientInfo's encryptedKey in several distinguishable ways, one of which disclosed the exact length recovered from the RSA operation. The same distinction was also observable by timing. An application that decrypts attacker-supplied EnvelopedData and reflects the outcome gives the attacker a Bleichenbacher oracle against the content-encryption key. Decryption ran as RSA PKCS#1 v1.5 decrypt of encryptedKey, build an AES cipher from the result, then AES-CBC decrypt and PKCS#7 unpad. Invalid RSA padding, a valid padding with a bad key length, a correct length with a wrong key, and the real key each failed or succeeded differently. Case 1 is reachable only where the linked library lacks implicit rejection: OpenSSL 3.0 and 3.1, LibreSSL, and BoringSSL. Exploitation requires a service that auto-decrypts untrusted EnvelopedData matching the victim certificate and answers adaptively at high volume, such as an S/MIME gateway or mail filter. This issue is fixed in 50.0.0.

Severity

8.2 (High)


                        
                          CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-04 14:09 UTC

CWE

CWE-208 - Observable Timing Discrepancy
CWE-209 - Generation of Error Message Containing Sensitive Information

Assigner

GitHub_M mitre root

References

3 references

URL	Tags
https://github.com/pyca/cryptography/security/adv…	x_refsource_CONFIRM
https://github.com/pyca/cryptography/pull/15369	x_refsource_MISC
https://github.com/pyca/cryptography/commit/53fcc…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
pyca	cryptography	Affected: >= 44.0.0, < 50.0.0

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-69247",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-04T14:09:18.204828Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-04T14:09:24.615Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "cryptography",
          "vendor": "pyca",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 44.0.0, \u003c 50.0.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. From 44.0.0 until 50.0.0, pkcs7_decrypt_der, pkcs7_decrypt_pem, and pkcs7_decrypt_smime reported the outcome of decrypting a RecipientInfo\u0027s encryptedKey in several distinguishable ways, one of which disclosed the exact length recovered from the RSA operation. The same distinction was also observable by timing. An application that decrypts attacker-supplied EnvelopedData and reflects the outcome gives the attacker a Bleichenbacher oracle against the content-encryption key. Decryption ran as RSA PKCS#1 v1.5 decrypt of encryptedKey, build an AES cipher from the result, then AES-CBC decrypt and PKCS#7 unpad. Invalid RSA padding, a valid padding with a bad key length, a correct length with a wrong key, and the real key each failed or succeeded differently. Case 1 is reachable only where the linked library lacks implicit rejection: OpenSSL 3.0 and 3.1, LibreSSL, and BoringSSL. Exploitation requires a service that auto-decrypts untrusted EnvelopedData matching the victim certificate and answers adaptively at high volume, such as an S/MIME gateway or mail filter. This issue is fixed in 50.0.0."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "HIGH",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "NONE"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-208",
              "description": "CWE-208: Observable Timing Discrepancy",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-209",
              "description": "CWE-209: Generation of Error Message Containing Sensitive Information",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-03T21:16:32.047Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/pyca/cryptography/security/advisories/GHSA-g6cj-pr64-35w5",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/pyca/cryptography/security/advisories/GHSA-g6cj-pr64-35w5"
        },
        {
          "name": "https://github.com/pyca/cryptography/pull/15369",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/pyca/cryptography/pull/15369"
        },
        {
          "name": "https://github.com/pyca/cryptography/commit/53fccd93413a8d7f07d6d8999681f27b75cffa3f",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/pyca/cryptography/commit/53fccd93413a8d7f07d6d8999681f27b75cffa3f"
        }
      ],
      "source": {
        "advisory": "GHSA-g6cj-pr64-35w5",
        "discovery": "UNKNOWN"
      },
      "title": "cryptography: PKCS#7 EnvelopedData decryption exposes a Bleichenbacher oracle through distinguishable errors and timing"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-69247",
    "datePublished": "2026-08-03T21:16:32.047Z",
    "dateReserved": "2026-08-03T19:54:19.852Z",
    "dateUpdated": "2026-08-04T14:09:24.615Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-69248 (GCVE-0-2026-69248)

Vulnerability from cvelistv5 – Published: 2026-08-03 21:21 – Updated: 2026-09-02 13:26

Title

python-cryptography verifier accepts wildcard DNS names allowing escape from permittedSubtrees

Summary

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In versions 45.0.0 through 48.0.0, if an intermediate constrained CA permits the DNS name foo.example.com, and the leaf certificate has a wildcard in its DNS SAN of *.example.com, python-cryptography's verifier accepts which allows escaping outside of the permitted names. The core issue is in DNSConstraint::matches, where a wildcard pattern was treated as matching a more-specific permitted constraint even though *.example.com can expand to sibling names such as bar.example.com outside foo.example.com. This allows acceptance of an invalid certificate chain. This issue is fixed in 49.0.0.

Severity

6.9 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:P

SSVC

Exploitation: poc Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-04 13:34 UTC

CWE

CWE-295 - Improper Certificate Validation

Assigner

GitHub_M mitre root

References

3 references

URL	Tags
https://github.com/pyca/cryptography/security/adv…	x_refsource_CONFIRM
https://github.com/pyca/cryptography/pull/14888	x_refsource_MISC
https://github.com/pyca/cryptography/commit/4d035…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
pyca	cryptography	Affected: < 49.0.0

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-69248",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-04T13:34:32.304052Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-04T15:04:51.587Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/pyca/cryptography/security/advisories/GHSA-m2h6-j472-rp4c"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "cryptography",
          "vendor": "pyca",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 49.0.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In versions 45.0.0 through 48.0.0, if an intermediate constrained CA permits the DNS name foo.example.com, and the leaf certificate has a wildcard in its DNS SAN of *.example.com, python-cryptography\u0027s verifier accepts which allows escaping outside of the permitted names. The core issue is in DNSConstraint::matches, where a wildcard pattern was treated as matching a more-specific permitted constraint even though *.example.com can expand to sibling names such as bar.example.com outside foo.example.com. This allows acceptance of an invalid certificate chain. This issue is fixed in 49.0.0."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 6.9,
            "baseSeverity": "MEDIUM",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:P",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "LOW",
            "vulnIntegrityImpact": "HIGH"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-295",
              "description": "CWE-295: Improper Certificate Validation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-02T13:26:35.057Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/pyca/cryptography/security/advisories/GHSA-m2h6-j472-rp4c",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/pyca/cryptography/security/advisories/GHSA-m2h6-j472-rp4c"
        },
        {
          "name": "https://github.com/pyca/cryptography/pull/14888",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/pyca/cryptography/pull/14888"
        },
        {
          "name": "https://github.com/pyca/cryptography/commit/4d035a4225965edeffd312079a510ef25fcfdcb2",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/pyca/cryptography/commit/4d035a4225965edeffd312079a510ef25fcfdcb2"
        }
      ],
      "source": {
        "advisory": "GHSA-m2h6-j472-rp4c",
        "discovery": "UNKNOWN"
      },
      "title": "python-cryptography verifier accepts wildcard DNS names allowing escape from permittedSubtrees"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-69248",
    "datePublished": "2026-08-03T21:21:43.710Z",
    "dateReserved": "2026-08-03T19:54:19.852Z",
    "dateUpdated": "2026-09-02T13:26:35.057Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-69249 (GCVE-0-2026-69249)

Vulnerability from cvelistv5 – Published: 2026-08-03 21:26 – Updated: 2026-09-04 21:20

Title

python-cryptography: Duplicate self-signed intermediates can cause exponential path-building

Summary

python-cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In versions 42.0.0 through 48.0.0, when resolving invalid certificate chains that include duplicate copies of self-signed certificates, the processing recursively invokes the same candidate, leading to an exponential blowup. Although the limitation that the chain depth cannot exceed a specified maximum depth prevents unbounded recursion and guarantees termination, an attacker-controlled certificate chain can lead the processing to easily take more than 5s to reject in testing. This amplification could form the basis for a resource exhaustion denial of service attack. The core issue arises in the recursive nature of build_chain_inner, which does not de-duplicate against previously analyzed candidates. As the correctness of validation is not affected, the integrity of a system cannot be compromised through this vector, only its availability. This issue is fixed in 49.0.0.

Severity

8.7 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

SSVC

Exploitation: poc Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-04 14:08 UTC

CWE

CWE-400 - Uncontrolled Resource Consumption

Assigner

GitHub_M mitre root

References

5 references

URL	Tags
https://github.com/pyca/cryptography/security/adv…	x_refsource_CONFIRM
https://github.com/pyca/cryptography/pull/14960	x_refsource_MISC
https://github.com/pyca/cryptography/commit/3763aa79b	x_refsource_MISC
https://github.com/pyca/cryptography/commit/4a12c…	x_refsource_MISC
https://github.com/pypa/advisory-database/tree/ma…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
pyca	cryptography	Affected: >= 42.0.0, < 49.0.0

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-69249",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-04T14:08:23.254769Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-04T14:08:58.056Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/pyca/cryptography/security/advisories/GHSA-jwv3-5hgf-82ww"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "cryptography",
          "vendor": "pyca",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 42.0.0, \u003c 49.0.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "python-cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In versions 42.0.0 through 48.0.0, when resolving invalid certificate chains that include duplicate copies of self-signed certificates, the processing recursively invokes the same candidate, leading to an exponential blowup. Although the limitation that the chain depth cannot exceed a specified maximum depth prevents unbounded recursion and guarantees termination, an attacker-controlled certificate chain can lead the processing to easily take more than 5s to reject in testing. This amplification could form the basis for a resource exhaustion denial of service attack. The core issue arises in the recursive nature of build_chain_inner, which does not de-duplicate against previously analyzed candidates. As the correctness of validation is not affected, the integrity of a system cannot be compromised through this vector, only its availability. This issue is fixed in 49.0.0."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-400",
              "description": "CWE-400: Uncontrolled Resource Consumption",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-04T21:20:32.666Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/pyca/cryptography/security/advisories/GHSA-jwv3-5hgf-82ww",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/pyca/cryptography/security/advisories/GHSA-jwv3-5hgf-82ww"
        },
        {
          "name": "https://github.com/pyca/cryptography/pull/14960",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/pyca/cryptography/pull/14960"
        },
        {
          "name": "https://github.com/pyca/cryptography/commit/3763aa79b",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/pyca/cryptography/commit/3763aa79b"
        },
        {
          "name": "https://github.com/pyca/cryptography/commit/4a12cf49675a184e47f912b00b04f3a629283582",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/pyca/cryptography/commit/4a12cf49675a184e47f912b00b04f3a629283582"
        },
        {
          "name": "https://github.com/pypa/advisory-database/tree/main/vulns/cryptography/PYSEC-2026-3553.yaml",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/pypa/advisory-database/tree/main/vulns/cryptography/PYSEC-2026-3553.yaml"
        }
      ],
      "source": {
        "advisory": "GHSA-jwv3-5hgf-82ww",
        "discovery": "UNKNOWN"
      },
      "title": "python-cryptography: Duplicate self-signed intermediates can cause exponential path-building"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-69249",
    "datePublished": "2026-08-03T21:26:45.826Z",
    "dateReserved": "2026-08-03T19:54:19.852Z",
    "dateUpdated": "2026-09-04T21:20:32.666Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

RHSA-2026:55543

CVE-2026-54876 (GCVE-0-2026-54876)

CVE-2026-69247 (GCVE-0-2026-69247)

CVE-2026-69248 (GCVE-0-2026-69248)

CVE-2026-69249 (GCVE-0-2026-69249)

Tags

Sightings

Nomenclature

Related by attack behaviour