CVE-2023-38325 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2023-38325 Interim 1 18 2026-03-05T03:39:37Z current 2023-07-17T23:15:26Z 2026-03-05T03:39:37Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2023-38325 The cryptography package before 41.0.2 for Python mishandles SSH certificates that have critical options. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings HPE Helion OpenStack 8 SUSE CaaS Platform 4.0 SUSE Linux Enterprise Module for Public Cloud 15 SP1 SUSE Enterprise Storage 7 SUSE Enterprise Storage 7.1 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Python 3 15 SP6 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Python 3 15 SP6 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Micro 5.4 SUSE Linux Enterprise Real Time 15 SP3 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP4-ESPOS SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP1 SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Server 15 SP3-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Python 3 15 SP6 SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise Server Teradata 12 SP3 SUSE Linux Enterprise Server Teradata 12 SP3-LTSS SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Python 3 15 SP6 SUSE Linux Micro 6.0 SUSE Linux Micro 6.1 SUSE Linux Enterprise Module for Public Cloud 15 SP1 SUSE Manager Proxy 4.2 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Public Cloud 15 SP1 SUSE Manager Retail Branch Server 4.2 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Public Cloud 15 SP1 SUSE Manager Server 4.2 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 8 SUSE OpenStack Cloud Crowbar 9 openSUSE Tumbleweed python-cryptography python2-cryptography python3-cryptography python310-cryptography-41.0.2-2.1 python311-cryptography-41.0.2-2.1 python311-cryptography-41.0.3-150600.21.6 python311-cryptography-42.0.4-1.7 python311-cryptography-42.0.4-slfo.1.1_1.2 python313-cryptography-44.0.3-160000.2.2 python39-cryptography-41.0.2-2.1 python311-cryptography-41.0.3-150600.21.6 as a component of SUSE Linux Enterprise Module for Python 3 15 SP6 python313-cryptography-44.0.3-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 python311-cryptography-42.0.4-1.7 as a component of SUSE Linux Micro 6.0 python311-cryptography-42.0.4-slfo.1.1_1.2 as a component of SUSE Linux Micro 6.1 python310-cryptography-41.0.2-2.1 as a component of openSUSE Tumbleweed python311-cryptography-41.0.2-2.1 as a component of openSUSE Tumbleweed python39-cryptography-41.0.2-2.1 as a component of openSUSE Tumbleweed python-cryptography as a component of HPE Helion OpenStack 8 python3-cryptography as a component of HPE Helion OpenStack 8 python2-cryptography as a component of SUSE CaaS Platform 4.0 python3-cryptography as a component of SUSE CaaS Platform 4.0 python-cryptography as a component of SUSE CaaS Platform 4.0 python-cryptography as a component of SUSE Enterprise Storage 7 python3-cryptography as a component of SUSE Enterprise Storage 7.1 python-cryptography as a component of SUSE Enterprise Storage 7.1 python-cryptography as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 python2-cryptography as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS python3-cryptography as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS python-cryptography as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS python2-cryptography as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS python3-cryptography as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS python-cryptography as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS python3-cryptography as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS python-cryptography as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS python3-cryptography as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS python-cryptography as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS python3-cryptography as a component of SUSE Linux Enterprise Micro 5.1 python-cryptography as a component of SUSE Linux Enterprise Micro 5.1 python3-cryptography as a component of SUSE Linux Enterprise Micro 5.2 python-cryptography as a component of SUSE Linux Enterprise Micro 5.2 python-cryptography as a component of SUSE Linux Enterprise Micro 5.3 python-cryptography as a component of SUSE Linux Enterprise Micro 5.4 python-cryptography as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 python-cryptography as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 python2-cryptography as a component of SUSE Linux Enterprise Module for Public Cloud 15 SP1 python3-cryptography as a component of SUSE Linux Enterprise Module for Public Cloud 15 SP1 python-cryptography as a component of SUSE Linux Enterprise Module for Public Cloud 15 SP1 python3-cryptography as a component of SUSE Linux Enterprise Real Time 15 SP3 python-cryptography as a component of SUSE Linux Enterprise Real Time 15 SP3 python-cryptography as a component of SUSE Linux Enterprise Server 12 SP2-BCL python3-cryptography as a component of SUSE Linux Enterprise Server 12 SP2-BCL python-cryptography as a component of SUSE Linux Enterprise Server 12 SP2-LTSS python3-cryptography as a component of SUSE Linux Enterprise Server 12 SP2-LTSS python-cryptography as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS python3-cryptography as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS python-cryptography as a component of SUSE Linux Enterprise Server 12 SP4-LTSS python3-cryptography as a component of SUSE Linux Enterprise Server 12 SP4-LTSS python-cryptography as a component of SUSE Linux Enterprise Server 12 SP5 python3-cryptography as a component of SUSE Linux Enterprise Server 12 SP5 python2-cryptography as a component of SUSE Linux Enterprise Server 15 SP1-LTSS python3-cryptography as a component of SUSE Linux Enterprise Server 15 SP1-LTSS python-cryptography as a component of SUSE Linux Enterprise Server 15 SP1-LTSS python2-cryptography as a component of SUSE Linux Enterprise Server 15 SP2-LTSS python3-cryptography as a component of SUSE Linux Enterprise Server 15 SP2-LTSS python-cryptography as a component of SUSE Linux Enterprise Server 15 SP2-LTSS python3-cryptography as a component of SUSE Linux Enterprise Server 15 SP3-LTSS python-cryptography as a component of SUSE Linux Enterprise Server 15 SP3-LTSS python2-cryptography as a component of SUSE Linux Enterprise Server 15-LTSS python3-cryptography as a component of SUSE Linux Enterprise Server 15-LTSS python-cryptography as a component of SUSE Linux Enterprise Server 15-LTSS python-cryptography as a component of SUSE Linux Enterprise Server Teradata 12 SP3 python-cryptography as a component of SUSE Linux Enterprise Server Teradata 12 SP3-LTSS python-cryptography as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 python3-cryptography as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 python-cryptography as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 python3-cryptography as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 python-cryptography as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 python2-cryptography as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 python3-cryptography as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 python-cryptography as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 python2-cryptography as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 python3-cryptography as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 python-cryptography as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 python3-cryptography as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 python-cryptography as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 python3-cryptography as a component of SUSE Manager Proxy 4.2 python-cryptography as a component of SUSE Manager Proxy 4.2 python3-cryptography as a component of SUSE Manager Retail Branch Server 4.2 python-cryptography as a component of SUSE Manager Retail Branch Server 4.2 python2-cryptography as a component of SUSE Manager Server 4.2 python3-cryptography as a component of SUSE Manager Server 4.2 python-cryptography as a component of SUSE Manager Server 4.2 python-cryptography as a component of SUSE OpenStack Cloud 8 python3-cryptography as a component of SUSE OpenStack Cloud 8 python-cryptography as a component of SUSE OpenStack Cloud 9 python3-cryptography as a component of SUSE OpenStack Cloud 9 python-cryptography as a component of SUSE OpenStack Cloud Crowbar 8 python3-cryptography as a component of SUSE OpenStack Cloud Crowbar 8 python-cryptography as a component of SUSE OpenStack Cloud Crowbar 9 python3-cryptography as a component of SUSE OpenStack Cloud Crowbar 9 The cryptography package before 41.0.2 for Python mishandles SSH certificates that have critical options. CVE-2023-38325 SUSE Linux Enterprise Module for Python 3 15 SP6:python311-cryptography-41.0.3-150600.21.6 SUSE Linux Enterprise Server 16.0:python313-cryptography-44.0.3-160000.2.2 SUSE Linux Micro 6.0:python311-cryptography-42.0.4-1.7 SUSE Linux Micro 6.1:python311-cryptography-42.0.4-slfo.1.1_1.2 openSUSE Tumbleweed:python310-cryptography-41.0.2-2.1 openSUSE Tumbleweed:python311-cryptography-41.0.2-2.1 openSUSE Tumbleweed:python39-cryptography-41.0.2-2.1 HPE Helion OpenStack 8:python-cryptography HPE Helion OpenStack 8:python3-cryptography SUSE CaaS Platform 4.0:python-cryptography SUSE CaaS Platform 4.0:python2-cryptography SUSE CaaS Platform 4.0:python3-cryptography SUSE Enterprise Storage 7.1:python-cryptography SUSE Enterprise Storage 7.1:python3-cryptography SUSE Enterprise Storage 7:python-cryptography SUSE Linux Enterprise High Performance Computing 12 SP5:python-cryptography SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:python-cryptography SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:python2-cryptography SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:python3-cryptography SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:python-cryptography SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:python2-cryptography SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:python3-cryptography SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:python-cryptography SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:python3-cryptography SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:python-cryptography SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:python3-cryptography SUSE Linux Enterprise Micro 5.1:python-cryptography SUSE Linux Enterprise Micro 5.1:python3-cryptography SUSE Linux Enterprise Micro 5.2:python-cryptography SUSE Linux Enterprise Micro 5.2:python3-cryptography SUSE Linux Enterprise Micro 5.3:python-cryptography SUSE Linux Enterprise Micro 5.4:python-cryptography SUSE Linux Enterprise Module for Basesystem 15 SP4:python-cryptography SUSE Linux Enterprise Module for Basesystem 15 SP5:python-cryptography SUSE Linux Enterprise Module for Public Cloud 15 SP1:python-cryptography SUSE Linux Enterprise Module for Public Cloud 15 SP1:python2-cryptography SUSE Linux Enterprise Module for Public Cloud 15 SP1:python3-cryptography SUSE Linux Enterprise Real Time 15 SP3:python-cryptography SUSE Linux Enterprise Real Time 15 SP3:python3-cryptography SUSE Linux Enterprise Server 12 SP2-BCL:python-cryptography SUSE Linux Enterprise Server 12 SP2-BCL:python3-cryptography SUSE Linux Enterprise Server 12 SP2-LTSS:python-cryptography SUSE Linux Enterprise Server 12 SP2-LTSS:python3-cryptography SUSE Linux Enterprise Server 12 SP4-ESPOS:python-cryptography SUSE Linux Enterprise Server 12 SP4-ESPOS:python3-cryptography SUSE Linux Enterprise Server 12 SP4-LTSS:python-cryptography SUSE Linux Enterprise Server 12 SP4-LTSS:python3-cryptography SUSE Linux Enterprise Server 12 SP5:python-cryptography SUSE Linux Enterprise Server 12 SP5:python3-cryptography SUSE Linux Enterprise Server 15 SP1-LTSS:python-cryptography SUSE Linux Enterprise Server 15 SP1-LTSS:python2-cryptography SUSE Linux Enterprise Server 15 SP1-LTSS:python3-cryptography SUSE Linux Enterprise Server 15 SP2-LTSS:python-cryptography SUSE Linux Enterprise Server 15 SP2-LTSS:python2-cryptography SUSE Linux Enterprise Server 15 SP2-LTSS:python3-cryptography SUSE Linux Enterprise Server 15 SP3-LTSS:python-cryptography SUSE Linux Enterprise Server 15 SP3-LTSS:python3-cryptography SUSE Linux Enterprise Server 15-LTSS:python-cryptography SUSE Linux Enterprise Server 15-LTSS:python2-cryptography SUSE Linux Enterprise Server 15-LTSS:python3-cryptography SUSE Linux Enterprise Server Teradata 12 SP3-LTSS:python-cryptography SUSE Linux Enterprise Server Teradata 12 SP3:python-cryptography SUSE Linux Enterprise Server for SAP Applications 12 SP2:python-cryptography SUSE Linux Enterprise Server for SAP Applications 12 SP2:python3-cryptography SUSE Linux Enterprise Server for SAP Applications 12 SP4:python-cryptography SUSE Linux Enterprise Server for SAP Applications 12 SP4:python3-cryptography SUSE Linux Enterprise Server for SAP Applications 12 SP5:python-cryptography SUSE Linux Enterprise Server for SAP Applications 15 SP1:python-cryptography SUSE Linux Enterprise Server for SAP Applications 15 SP1:python2-cryptography SUSE Linux Enterprise Server for SAP Applications 15 SP1:python3-cryptography SUSE Linux Enterprise Server for SAP Applications 15 SP2:python-cryptography SUSE Linux Enterprise Server for SAP Applications 15 SP2:python2-cryptography SUSE Linux Enterprise Server for SAP Applications 15 SP2:python3-cryptography SUSE Linux Enterprise Server for SAP Applications 15 SP3:python-cryptography SUSE Linux Enterprise Server for SAP Applications 15 SP3:python3-cryptography SUSE Manager Proxy 4.2:python-cryptography SUSE Manager Proxy 4.2:python3-cryptography SUSE Manager Retail Branch Server 4.2:python-cryptography SUSE Manager Retail Branch Server 4.2:python3-cryptography SUSE Manager Server 4.2:python-cryptography SUSE Manager Server 4.2:python2-cryptography SUSE Manager Server 4.2:python3-cryptography SUSE OpenStack Cloud 8:python-cryptography SUSE OpenStack Cloud 8:python3-cryptography SUSE OpenStack Cloud 9:python-cryptography SUSE OpenStack Cloud 9:python3-cryptography SUSE OpenStack Cloud Crowbar 8:python-cryptography SUSE OpenStack Cloud Crowbar 8:python3-cryptography SUSE OpenStack Cloud Crowbar 9:python-cryptography SUSE OpenStack Cloud Crowbar 9:python3-cryptography moderate 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H