Lucene search

K
redhatcveRedhat.comRH:CVE-2023-23931
HistoryFeb 20, 2023 - 2:29 p.m.

CVE-2023-23931

2023-02-2014:29:26
redhat.com
access.redhat.com
18

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.6%

A vulnerability was found in python-cryptography. In affected versions, Cipher.update_into would accept Python objects which implement the buffer protocol but provide only immutable buffers. This issue allows immutable objects (such as bytes) to be mutated, thus violating the fundamental rules of Python, resulting in corrupted output.