CVE catalog

CVE-2023-50782

python-cryptography: CVE-2023-50782

[CVE catalog]

Severity
High · CVSS 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Published
Source
[NVD] · [CVE record]
EPSS
1.12% · Oct 27, 2026

A flaw was found in the python-cryptography package. This issue may allow a remote attacker to decrypt captured messages in TLS servers that use RSA key exchanges, which may lead to exposure of confidential or sensitive data.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianpython-cryptographysid49.0.0-2fixed
Debianpython-cryptographyforky49.0.0-2fixed
Debianpython-cryptographytrixie43.0.0-3+deb13u1fixed
Debianpython-cryptographybookworm38.0.4-3+deb12u1vulnerable
Debianpython-cryptographybookworm-security38.0.4-3~deb12u1vulnerable
PyPIcryptographyNot reported42.0.0fixed
Ubuntupython-cryptographypro1.0.1-1ubuntu1vulnerable
Ubuntupython-cryptographypro1.0.2-1vulnerable
Ubuntupython-cryptographypro1.1-1vulnerable
Ubuntupython-cryptographypro1.1.1-1vulnerable
Ubuntupython-cryptographypro1.1.1-1ubuntu1vulnerable
Ubuntupython-cryptographypro1.1.1-1ubuntu2vulnerable
Ubuntupython-cryptographypro1.1.1-1ubuntu3vulnerable
Ubuntupython-cryptographypro1.2.2-2vulnerable
Ubuntupython-cryptographypro1.2.3-1vulnerable
Ubuntupython-cryptographypro1.2.3-1ubuntu0.1vulnerable
Ubuntupython-cryptographypro1.2.3-1ubuntu0.2vulnerable
Ubuntupython-cryptographypro1.2.3-1ubuntu0.3vulnerable
Ubuntupython-cryptographypro1.2.3-1ubuntu0.3+esm1fixed
Suseopenssl-3linux micro 6.13.1.4-slfo.1.1_6.1fixed
Suseopenssl-3linux micro 6.03.1.4-7.1fixed
Ubuntupython-cryptographypro1.9-1vulnerable
Ubuntupython-cryptographypro2.1.3-3vulnerable
Ubuntupython-cryptographypro2.1.4-1vulnerable
Ubuntupython-cryptographypro2.1.4-1build1vulnerable
Ubuntupython-cryptographypro2.1.4-1build2vulnerable
Ubuntupython-cryptographypro2.1.4-1ubuntu1vulnerable
Ubuntupython-cryptographypro2.1.4-1ubuntu1.1vulnerable
Ubuntupython-cryptographypro2.1.4-1ubuntu1.2vulnerable
Ubuntupython-cryptographypro2.1.4-1ubuntu1.3vulnerable
Ubuntupython-cryptographypro2.1.4-1ubuntu1.4vulnerable
Ubuntupython-cryptographypro2.1.4-1ubuntu1.4+esm1fixed
Ubuntupython-cryptography20.042.6.1-3.1vulnerable
Ubuntupython-cryptography20.042.6.1-4vulnerable
Ubuntupython-cryptography20.042.6.1-4ubuntu1vulnerable
Ubuntupython-cryptography20.042.8-1ubuntu2vulnerable
Ubuntupython-cryptography20.042.8-2vulnerable
Ubuntupython-cryptography20.042.8-3vulnerable
Ubuntupython-cryptography20.042.8-3ubuntu0.1vulnerable
Ubuntupython-cryptography20.042.8-3ubuntu0.2vulnerable
Ubuntupython-cryptography20.042.8-3ubuntu0.3fixed
Ubuntupython-cryptography22.043.3.2-1vulnerable
Ubuntupython-cryptography22.043.3.2-1build1vulnerable
Ubuntupython-cryptography22.043.4.8-1vulnerable
Ubuntupython-cryptography22.043.4.8-1ubuntu1vulnerable
Ubuntupython-cryptography22.043.4.8-1ubuntu2vulnerable
Ubuntupython-cryptography22.043.4.8-1ubuntu2.1vulnerable
Ubuntupython-cryptography22.043.4.8-1ubuntu2.2fixed
Suseopenssl-1_1linux enterprise high performance computing 15 sp2-ltss1.1.1d-150200.11.97.1fixed
Suseopenssl-1_1linux enterprise high performance computing 15 sp3-ltss1.1.1d-150200.11.97.1fixed
Suseopenssl-1_1linux enterprise server 15 sp2-ltss1.1.1d-150200.11.97.1fixed
Suseopenssl-1_1linux enterprise server 15 sp3-ltss1.1.1d-150200.11.97.1fixed
Suseopenssl-1_1linux enterprise server for sap applications 15 sp21.1.1d-150200.11.97.1fixed
Suseopenssl-1_1linux enterprise server for sap applications 15 sp31.1.1d-150200.11.97.1fixed
Suseopenssl-1_1linux enterprise micro 5.11.1.1d-150200.11.97.1fixed
Suseopenssl-1_1linux enterprise micro 5.21.1.1d-150200.11.97.1fixed
Suseopenssl-1_1enterprise storage 7.11.1.1d-150200.11.97.1fixed
Suseopenssl-1_1linux enterprise server 12 sp5-ltss1.1.1d-2.113.1fixed
Suseopenssl-1_1linux enterprise server ltss extended security 12 sp51.1.1d-2.113.1fixed
Suseopenssl-1_1linux enterprise module for basesystem 15 sp61.1.1w-150600.5.9.1fixed
Suseopenssl-1_1linux enterprise module for development tools 15 sp61.1.1w-150600.5.9.1fixed
Suseopenssl-1_1linux enterprise module for legacy 15 sp61.1.1w-150600.5.9.1fixed
Opensuseopenssl-1_1leap 15.61.1.1w-150600.5.9.1fixed
Ubuntupython-cryptographypro1.9-1vulnerable
Ubuntupython-cryptographypro2.1.3-3vulnerable
Ubuntupython-cryptographypro2.1.4-1vulnerable
Ubuntupython-cryptographypro2.1.4-1build1vulnerable
Ubuntupython-cryptographypro2.1.4-1build2vulnerable
Ubuntupython-cryptographypro2.1.4-1ubuntu1vulnerable
Ubuntupython-cryptographypro2.1.4-1ubuntu1.1vulnerable
Ubuntupython-cryptographypro2.1.4-1ubuntu1.2vulnerable
Ubuntupython-cryptographypro2.1.4-1ubuntu1.3vulnerable
Ubuntupython-cryptographypro2.1.4-1ubuntu1.4vulnerable
Ubuntupython-cryptographypro2.1.4-1ubuntu1.4+esm1fixed
Ubuntupython-cryptography20.042.6.1-3.1vulnerable
Ubuntupython-cryptography20.042.6.1-4vulnerable
Ubuntupython-cryptography20.042.6.1-4ubuntu1vulnerable
Ubuntupython-cryptography20.042.8-1ubuntu2vulnerable
Ubuntupython-cryptography20.042.8-2vulnerable
Ubuntupython-cryptography20.042.8-3vulnerable
Ubuntupython-cryptography20.042.8-3ubuntu0.1vulnerable
Ubuntupython-cryptography20.042.8-3ubuntu0.2vulnerable
Ubuntupython-cryptography20.042.8-3ubuntu0.3fixed
Ubuntupython-cryptography22.043.3.2-1vulnerable
Ubuntupython-cryptography22.043.3.2-1build1vulnerable
Ubuntupython-cryptography22.043.4.8-1vulnerable
Ubuntupython-cryptography22.043.4.8-1ubuntu1vulnerable
Ubuntupython-cryptography22.043.4.8-1ubuntu2vulnerable
Ubuntupython-cryptography22.043.4.8-1ubuntu2.1vulnerable
Ubuntupython-cryptography22.043.4.8-1ubuntu2.2fixed
Suseopenssl-3linux enterprise micro 5.33.0.8-150400.4.69.1fixed
Suseopenssl-3linux enterprise micro 5.43.0.8-150400.4.69.1fixed
Suseopenssl-3linux enterprise server 15 sp4-ltss3.0.8-150400.4.69.1fixed
Suseopenssl-3manager server 4.33.0.8-150400.4.69.1fixed
Suseopenssl-1_1linux enterprise micro 5.51.1.1l-150500.17.37.1fixed
Suseopenssl-1_1linux enterprise module for basesystem 15 sp51.1.1l-150500.17.37.1fixed
Opensuseopenssl-1_1leap micro 5.51.1.1l-150500.17.37.1fixed
Opensuseopenssl-1_1leap 15.51.1.1l-150500.17.37.1fixed
Suseopenssl-1_1linux enterprise micro 5.31.1.1l-150400.7.75.1fixed
Suseopenssl-1_1linux enterprise micro 5.41.1.1l-150400.7.75.1fixed
Suseopenssl-1_1linux enterprise high performance computing 15 sp4-espos1.1.1l-150400.7.75.1fixed
Suseopenssl-1_1linux enterprise high performance computing 15 sp4-ltss1.1.1l-150400.7.75.1fixed
Suseopenssl-1_1linux enterprise server 15 sp4-ltss1.1.1l-150400.7.75.1fixed
Suseopenssl-1_1linux enterprise server for sap applications 15 sp41.1.1l-150400.7.75.1fixed
Suseopenssl-1_1manager server 4.31.1.1l-150400.7.75.1fixed
Opensuseopenssl-3tumbleweed3.1.4-15.1fixed
Suseopenssl-3linux enterprise module for basesystem 15 sp53.0.8-150500.5.48.1fixed
Opensuseopenssl-3leap 15.53.0.8-150500.5.48.1fixed
Suseopenssl-3linux enterprise module for basesystem 15 sp63.1.4-150600.5.21.1fixed
Opensuseopenssl-3leap 15.63.1.4-150600.5.21.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianpython-cryptographysourcesid42.0.5-1not yet assignedNot reported[1059308]
Debianpython-cryptographysourceforky42.0.5-1not yet assignedNot reported[1059308]
Debianpython-cryptographysourcetrixie42.0.5-1not yet assignedNot reported[1059308]
Debianpython-cryptographysourcebookworm(unfixed)not yet assignedNot reported[1059308]
PyPIcryptographyPyPINot reported42.0.0Not reportedGHSA-3WW4-GG4F-JR7FNot reported
Ubuntupython-cryptographydebpro1.2.3-1ubuntu0.3+esm1Not reportedUSN-6673-2Not reported
Suseopenssl-3rpmlinux micro 6.13.1.4-slfo.1.1_6.1Not reportedSUSE-SU-2025:20593-1Not reported
Suseopenssl-3rpmlinux micro 6.03.1.4-7.1Not reportedSUSE-SU-2025:20081-1Not reported
Ubuntupython-cryptographydebpro2.1.4-1ubuntu1.4+esm1Not reportedUSN-6673-1Not reported
Ubuntupython-cryptographydeb20.042.8-3ubuntu0.3Not reportedUSN-6673-1Not reported
Ubuntupython-cryptographydeb22.043.4.8-1ubuntu2.2Not reportedUSN-6673-1Not reported
Suseopenssl-1_1rpmlinux enterprise high performance computing 15 sp2-ltss1.1.1d-150200.11.97.1Not reportedSUSE-SU-2024:3904-1Not reported
Suseopenssl-1_1rpmlinux enterprise high performance computing 15 sp3-ltss1.1.1d-150200.11.97.1Not reportedSUSE-SU-2024:3904-1Not reported
Suseopenssl-1_1rpmlinux enterprise server 15 sp2-ltss1.1.1d-150200.11.97.1Not reportedSUSE-SU-2024:3904-1Not reported
Suseopenssl-1_1rpmlinux enterprise server 15 sp3-ltss1.1.1d-150200.11.97.1Not reportedSUSE-SU-2024:3904-1Not reported
Suseopenssl-1_1rpmlinux enterprise server for sap applications 15 sp21.1.1d-150200.11.97.1Not reportedSUSE-SU-2024:3904-1Not reported
Suseopenssl-1_1rpmlinux enterprise server for sap applications 15 sp31.1.1d-150200.11.97.1Not reportedSUSE-SU-2024:3904-1Not reported
Suseopenssl-1_1rpmlinux enterprise micro 5.11.1.1d-150200.11.97.1Not reportedSUSE-SU-2024:3904-1Not reported
Suseopenssl-1_1rpmlinux enterprise micro 5.21.1.1d-150200.11.97.1Not reportedSUSE-SU-2024:3904-1Not reported
Suseopenssl-1_1rpmenterprise storage 7.11.1.1d-150200.11.97.1Not reportedSUSE-SU-2024:3904-1Not reported
Suseopenssl-1_1rpmlinux enterprise server 12 sp5-ltss1.1.1d-2.113.1Not reportedSUSE-SU-2024:3757-1Not reported
Suseopenssl-1_1rpmlinux enterprise server ltss extended security 12 sp51.1.1d-2.113.1Not reportedSUSE-SU-2024:3757-1Not reported
Suseopenssl-1_1rpmlinux enterprise module for basesystem 15 sp61.1.1w-150600.5.9.1Not reportedSUSE-SU-2024:3905-1Not reported
Suseopenssl-1_1rpmlinux enterprise module for development tools 15 sp61.1.1w-150600.5.9.1Not reportedSUSE-SU-2024:3905-1Not reported
Suseopenssl-1_1rpmlinux enterprise module for legacy 15 sp61.1.1w-150600.5.9.1Not reportedSUSE-SU-2024:3905-1Not reported
Opensuseopenssl-1_1rpmleap 15.61.1.1w-150600.5.9.1Not reportedSUSE-SU-2024:3905-1Not reported
Ubuntupython-cryptographydebpro2.1.4-1ubuntu1.4+esm1Not reportedUBUNTU-CVE-2023-50782Not reported
Ubuntupython-cryptographydeb20.042.8-3ubuntu0.3Not reportedUBUNTU-CVE-2023-50782Not reported
Ubuntupython-cryptographydeb22.043.4.8-1ubuntu2.2Not reportedUBUNTU-CVE-2023-50782Not reported
Suseopenssl-3rpmlinux enterprise micro 5.33.0.8-150400.4.69.1Not reportedSUSE-SU-2024:3871-1Not reported
Suseopenssl-3rpmlinux enterprise micro 5.43.0.8-150400.4.69.1Not reportedSUSE-SU-2024:3871-1Not reported
Suseopenssl-3rpmlinux enterprise server 15 sp4-ltss3.0.8-150400.4.69.1Not reportedSUSE-SU-2024:3871-1Not reported
Suseopenssl-3rpmmanager server 4.33.0.8-150400.4.69.1Not reportedSUSE-SU-2024:3871-1Not reported
Suseopenssl-1_1rpmlinux enterprise micro 5.51.1.1l-150500.17.37.1Not reportedSUSE-SU-2024:3765-1Not reported
Suseopenssl-1_1rpmlinux enterprise module for basesystem 15 sp51.1.1l-150500.17.37.1Not reportedSUSE-SU-2024:3765-1Not reported
Opensuseopenssl-1_1rpmleap micro 5.51.1.1l-150500.17.37.1Not reportedSUSE-SU-2024:3765-1Not reported
Opensuseopenssl-1_1rpmleap 15.51.1.1l-150500.17.37.1Not reportedSUSE-SU-2024:3765-1Not reported
Suseopenssl-1_1rpmlinux enterprise micro 5.31.1.1l-150400.7.75.1Not reportedSUSE-SU-2024:3872-1Not reported
Suseopenssl-1_1rpmlinux enterprise micro 5.41.1.1l-150400.7.75.1Not reportedSUSE-SU-2024:3872-1Not reported
Suseopenssl-1_1rpmlinux enterprise high performance computing 15 sp4-espos1.1.1l-150400.7.75.1Not reportedSUSE-SU-2024:3872-1Not reported
Suseopenssl-1_1rpmlinux enterprise high performance computing 15 sp4-ltss1.1.1l-150400.7.75.1Not reportedSUSE-SU-2024:3872-1Not reported
Suseopenssl-1_1rpmlinux enterprise server 15 sp4-ltss1.1.1l-150400.7.75.1Not reportedSUSE-SU-2024:3872-1Not reported
Suseopenssl-1_1rpmlinux enterprise server for sap applications 15 sp41.1.1l-150400.7.75.1Not reportedSUSE-SU-2024:3872-1Not reported
Suseopenssl-1_1rpmmanager server 4.31.1.1l-150400.7.75.1Not reportedSUSE-SU-2024:3872-1Not reported
Opensuseopenssl-3rpmtumbleweed3.1.4-15.1Not reportedOPENSUSE-SU-2024:14416-1Not reported
Suseopenssl-3rpmlinux enterprise module for basesystem 15 sp53.0.8-150500.5.48.1Not reportedSUSE-SU-2024:3766-1Not reported
Opensuseopenssl-3rpmleap 15.53.0.8-150500.5.48.1Not reportedSUSE-SU-2024:3766-1Not reported
Suseopenssl-3rpmlinux enterprise module for basesystem 15 sp63.1.4-150600.5.21.1Not reportedSUSE-SU-2024:3943-1Not reported
Opensuseopenssl-3rpmleap 15.63.1.4-150600.5.21.1Not reportedSUSE-SU-2024:3943-1Not reported

[Debian bug #1059308]

Notes

[bookworm] python-cryptography: Minor issue, fix relies on OpenSSL 3.2 interfaces

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • Source package: [python-cryptography]

    Details (4)
    • 38.0.4-3+deb12u1 · amd64 · bookworm

      Affected

      dsa · python-cryptography · debian · bookworm; dsa · python-cryptography · debian · 12

    • 38.0.4-3+deb12u1 · arm64 · bookworm

      Affected

      dsa · python-cryptography · debian · bookworm; dsa · python-cryptography · debian · 12

    • 38.0.4-3~deb12u1 · amd64 · bookworm-security

      Affected

      dsa · python-cryptography · debian · bookworm; dsa · python-cryptography · debian · 12

    • 38.0.4-3~deb12u1 · arm64 · bookworm-security

      Affected

      dsa · python-cryptography · debian · bookworm; dsa · python-cryptography · debian · 12

  • Source package: [python-cryptography]

    Details (2)
    • 38.0.4-3+deb12u1 · all · bookworm

      Affected

      dsa · python-cryptography · debian · bookworm; dsa · python-cryptography · debian · 12

    • 38.0.4-3+deb12u1 · all · bookworm

      Affected

      dsa · python-cryptography · debian · bookworm; dsa · python-cryptography · debian · 12

[openSUSE Tumbleweed]

  • [libopenssl3]Unknown

    Source package: [openssl-3]

    Details (1)
    • 3.5.3-8.1 · x86_64 · tumbleweed

      Unknown · Fixed: 3.1.4-15.1

      Version impact unknown

      dsa · openssl-3 · opensuse · tumbleweed

  • Source package: [openssl-3]

    Details (1)
    • 3.5.3-8.1 · x86_64 · tumbleweed

      Unknown · Fixed: 3.1.4-15.1

      Version impact unknown

      dsa · openssl-3 · opensuse · tumbleweed

  • Source package: [openssl-3]

    Details (1)
    • 3.5.3-8.1 · x86_64 · tumbleweed

      Unknown · Fixed: 3.1.4-15.1

      Version impact unknown

      dsa · openssl-3 · opensuse · tumbleweed

  • Source package: [openssl-3]

    Details (1)
    • 3.5.3-8.1 · x86_64 · tumbleweed

      Unknown · Fixed: 3.1.4-15.1

      Version impact unknown

      dsa · openssl-3 · opensuse · tumbleweed

  • Source package: [openssl-3]

    Details (1)
    • 3.5.3-8.1 · x86_64 · tumbleweed

      Unknown · Fixed: 3.1.4-15.1

      Version impact unknown

      dsa · openssl-3 · opensuse · tumbleweed

  • Source package: [openssl-3]

    Details (1)
    • 3.5.3-8.1 · x86_64 · tumbleweed

      Unknown · Fixed: 3.1.4-15.1

      Version impact unknown

      dsa · openssl-3 · opensuse · tumbleweed

  • Source package: [openssl-3]

    Details (1)
    • 3.5.3-8.1 · x86_64 · tumbleweed

      Unknown · Fixed: 3.1.4-15.1

      Version impact unknown

      dsa · openssl-3 · opensuse · tumbleweed

  • Source package: [openssl-3]

    Details (1)
    • 3.5.3-8.1 · x86_64 · tumbleweed

      Unknown · Fixed: 3.1.4-15.1

      Version impact unknown

      dsa · openssl-3 · opensuse · tumbleweed

  • [openssl-3-doc]Unknown

    Source package: [openssl-3]

    Details (1)
    • 3.5.3-8.1 · noarch · tumbleweed

      Unknown · Fixed: 3.1.4-15.1

      Version impact unknown

      dsa · openssl-3 · opensuse · tumbleweed

  • [openssl-3]Fixed

    Source package: [openssl-3]

    Details (1)
    • 3.5.3-8.1 · x86_64 · tumbleweed

      Fixed · Fixed: 3.1.4-15.1

      dsa · openssl-3 · opensuse · tumbleweed

[Debian 13 (Trixie)]

  • Source package: [python-cryptography]

    Details (2)
    • 43.0.0-3+deb13u1 · amd64 · trixie

      Fixed · Fixed: 42.0.5-1

      dsa · python-cryptography · debian · 13

    • 43.0.0-3+deb13u1 · arm64 · trixie

      Fixed · Fixed: 42.0.5-1

      dsa · python-cryptography · debian · 13

  • Source package: [python-cryptography]

    Details (2)
    • 43.0.0-3+deb13u1 · all · trixie

      Fixed · Fixed: 42.0.5-1

      dsa · python-cryptography · debian · 13

    • 43.0.0-3+deb13u1 · all · trixie

      Fixed · Fixed: 42.0.5-1

      dsa · python-cryptography · debian · 13

Observed:

References