[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fpeo-X7rnZCDC7kxyV18QUTmK9fkX01JDX1UnAKwG2mo":3,"g5a-risk:CVE-2023-49083":131},{"success":4,"data":5,"meta":128},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":28,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":48,"references":49,"referencesCount":80,"weaknesses":81,"weaknessesCount":48,"isActivelyExploited":90,"cisaInfo":28,"otxData":28,"relatedBlogPosts":91,"seoMetadata":92,"configurations":117,"relatedVendorCves":126,"notableEvents":127},"CVE-2023-49083","What is CVE-2023-49083?","cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Calling `load_pem_pkcs7_certificates` or `load_der_pkcs7_certificates` could lead to a NULL-pointer dereference and segfault. Exploitation of this vulnerability poses a serious risk of Denial of Service (DoS) for any application attempting to deserialize a PKCS7 blob\u002Fcertificate. The consequences extend to potential disruptions in system availability and stability. This vulnerability has been patched in version 41.0.6.","cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Calling `load_pem_pkcs7_certificates` or `load_der_pk...","2023-11-29T19:15:07.967","2025-11-03T22:16:29.837",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":37,"CVSSMetricV2":38,"CVSSMetricV40":28},[16,31],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":29,"ImpactScore":30},"security-advisories@github.com","Secondary",{"Version":20,"VectorString":21,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":24,"IntegrityImpact":24,"AvailabilityImpact":23,"BaseScore":26,"BaseSeverity":27,"ExploitCodeMaturity":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"TemporalSeverity":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"ModifiedAttackVector":28,"ModifiedAttackComplexity":28,"ModifiedPrivilegesRequired":28,"ModifiedUserInteraction":28,"ModifiedScope":28,"ModifiedConfidentialityImpact":28,"ModifiedIntegrityImpact":28,"ModifiedAvailabilityImpact":28,"EnvironmentalScore":28,"EnvironmentalSeverity":28},"3.1","CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H","NETWORK","HIGH","NONE","UNCHANGED",5.9,"MEDIUM",null,2.2,3.6,{"Source":32,"Type":33,"CVSSData":34,"ExploitabilityScore":36,"ImpactScore":30},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":22,"AttackComplexity":35,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":24,"IntegrityImpact":24,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":23,"ExploitCodeMaturity":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"TemporalSeverity":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"ModifiedAttackVector":28,"ModifiedAttackComplexity":28,"ModifiedPrivilegesRequired":28,"ModifiedUserInteraction":28,"ModifiedScope":28,"ModifiedConfidentialityImpact":28,"ModifiedIntegrityImpact":28,"ModifiedAvailabilityImpact":28,"EnvironmentalScore":28,"EnvironmentalSeverity":28},"LOW",3.9,[],[],0.00985,[39,39,39,39,39,39,39],"High",[43],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"cryptography.io","cryptography","*","cpe:2.3:a:cryptography.io:cryptography:*:*:*:*:*:python:*:*",1,[50,55,59,64,68,70,72,74,78],{"url":51,"source":52,"tags":53},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fcommit\u002Ff09c261ca10a31fe41b1262306db7f8f1da0e48a","GitHub",[54],"Patch",{"url":56,"source":52,"tags":57},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fpull\u002F9926",[58,54],"Issue Tracking",{"url":60,"source":52,"tags":61},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-jfhm-5ghh-2f97",[62,63],"Exploit","Vendor Advisory",{"url":65,"source":66,"tags":67},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FQMNTYMUGFJSDBYBU22FUYBHFRZODRKXV\u002F","Fedoraproject",[],{"url":51,"source":52,"tags":69},[54],{"url":56,"source":52,"tags":71},[58,54],{"url":60,"source":52,"tags":73},[62,63],{"url":75,"source":76,"tags":77},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F10\u002Fmsg00012.html","Debian",[],{"url":65,"source":66,"tags":79},[],9,[82],{"id":83,"name":84,"description":85,"extendedDescription":86,"status":87,"abstraction":88,"structure":89},"CWE-476","NULL Pointer Dereference","The product dereferences a pointer that it expects to be valid but is NULL.","","Stable","Base","Simple",false,[],{"title":93,"metaDescription":94,"keywords":95,"canonicalUrl":96,"structuredData":97},"What is CVE-2023-49083? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2023-49083, a high severity cyber security vulnerability from 2023. cryptography is a package designed to expose cryptographic ...","CVE-2023-49083, CVE-2023-49083 vulnerability, CVE-2023-49083 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2023, CVSS score, exploit, patch, remediation, cryptography.io security, cryptography vulnerability","\u002Fwhat-is\u002Fcve-2023-49083",{"@context":98,"@type":99,"headline":93,"description":94,"datePublished":10,"dateModified":11,"author":100,"publisher":104,"about":108,"mainEntityOfPage":112,"articleSection":115,"keywords":116},"https:\u002F\u002Fschema.org","TechArticle",{"@type":101,"name":102,"url":103},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":101,"name":102,"url":103,"logo":105},{"@type":106,"url":107},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":109,"name":6,"description":110,"additionalType":111},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":113,"@id":114},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2023-49083","Cybersecurity","CVE-2023-49083, CVE-2023-49083 vulnerability, CVE-2023-49083 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[118],{"Operator":28,"Negate":28,"Nodes":119},[120],{"Operator":121,"Negate":90,"CPEMatch":122},"OR",[123],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":124,"VersionStartExcluding":28,"VersionStartIncluding":20,"VersionEndExcluding":125,"VersionEndIncluding":28},"EB8793E0-61EC-45EC-8818-44A40DB08658","41.0.6",[],[],{"lastModified":11,"cacheTime":129,"version":130},1792369574066,"2.0",{"score":132,"band":133,"action":134,"scoredAt":135},49,"Medium","Plan remediation","2026-10-16T06:59:56.214225+00:00"]