Vulnerability-Lookup

SUSE-SU-2026:23196-1

Vulnerability from csaf_suse - Published: 2026-08-19 11:18 - Updated: 2026-09-17 16:17

Summary

Security update for python-cryptography

Severity

Moderate

Notes

Title of the patch: Security update for python-cryptography

Description of the patch: This update for python-cryptography fixes the following issues: - CVE-2026-69248: verifier accepts wildcard DNS names allowing escape from permittedSubtrees (bsc#1273549). - CVE-2026-69249: duplicate self-signed intermediates can cause exponential path-building (bsc#1273516).

Patchnames: SUSE-SLE-Micro-6.1-678

CVE-2026-69248

5.4 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Affected products

Recommended 4 products

Product	Version	Remediation
Unresolved product id: SUSE Linux Micro 6.1:python311-cryptography-0:42.0.4-slfo.1.1_6.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:python311-cryptography-0:42.0.4-slfo.1.1_6.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:python311-cryptography-0:42.0.4-slfo.1.1_6.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:python311-cryptography-0:42.0.4-slfo.1.1_6.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2026-69249

5.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 4 products, the same list as for CVE-2026-69248

Threats

Impact moderate

References

12 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/s…	self
https://www.suse.com/support/update/announcement/…	self
https://lists.suse.com/pipermail/sle-updates/2026…	self
https://bugzilla.suse.com/1273516	self
https://bugzilla.suse.com/1273549	self
https://www.suse.com/security/cve/CVE-2026-69248/	self
https://www.suse.com/security/cve/CVE-2026-69249/	self
https://www.suse.com/security/cve/CVE-2026-69248	external
https://bugzilla.suse.com/1273549	external
https://www.suse.com/security/cve/CVE-2026-69249	external
https://bugzilla.suse.com/1273516	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for python-cryptography",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for python-cryptography fixes the following issues:\n\n- CVE-2026-69248: verifier accepts wildcard DNS names allowing escape from permittedSubtrees (bsc#1273549).\n- CVE-2026-69249: duplicate self-signed intermediates can cause exponential path-building (bsc#1273516).\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-SLE-Micro-6.1-678",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_23196-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2026:23196-1",
        "url": "https://www.suse.com/support/update/announcement/2026/suse-su-202623196-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2026:23196-1",
        "url": "https://lists.suse.com/pipermail/sle-updates/2026-August/049459.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1273516",
        "url": "https://bugzilla.suse.com/1273516"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1273549",
        "url": "https://bugzilla.suse.com/1273549"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-69248 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-69248/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-69249 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-69249/"
      }
    ],
    "title": "Security update for python-cryptography",
    "tracking": {
      "current_release_date": "2026-09-17T16:17:08Z",
      "generator": {
        "date": "2026-08-19T11:18:18Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2026:23196-1",
      "initial_release_date": "2026-08-19T11:18:18Z",
      "revision_history": [
        {
          "date": "2026-08-19T11:18:18Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-09-16T19:24:52Z",
          "number": "2",
          "summary": "unknown changes"
        },
        {
          "date": "2026-09-16T20:12:38Z",
          "number": "3",
          "summary": "unknown changes"
        },
        {
          "date": "2026-09-17T16:17:08Z",
          "number": "4",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "4"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "python311-cryptography-0:42.0.4-slfo.1.1_6.1.aarch64",
                "product": {
                  "name": "python311-cryptography-0:42.0.4-slfo.1.1_6.1.aarch64",
                  "product_id": "python311-cryptography-0:42.0.4-slfo.1.1_6.1.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:python-cryptography_project:python-cryptography:42.0.4:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/python311-cryptography@42.0.4-slfo.1.1_6.1?arch=aarch64\u0026upstream=python-cryptography-0:42.0.4-slfo.1.1_6.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "python311-cryptography-0:42.0.4-slfo.1.1_6.1.ppc64le",
                "product": {
                  "name": "python311-cryptography-0:42.0.4-slfo.1.1_6.1.ppc64le",
                  "product_id": "python311-cryptography-0:42.0.4-slfo.1.1_6.1.ppc64le",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:python-cryptography_project:python-cryptography:42.0.4:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/python311-cryptography@42.0.4-slfo.1.1_6.1?arch=ppc64le\u0026upstream=python-cryptography-0:42.0.4-slfo.1.1_6.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "python311-cryptography-0:42.0.4-slfo.1.1_6.1.s390x",
                "product": {
                  "name": "python311-cryptography-0:42.0.4-slfo.1.1_6.1.s390x",
                  "product_id": "python311-cryptography-0:42.0.4-slfo.1.1_6.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:python-cryptography_project:python-cryptography:42.0.4:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/python311-cryptography@42.0.4-slfo.1.1_6.1?arch=s390x\u0026upstream=python-cryptography-0:42.0.4-slfo.1.1_6.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "python311-cryptography-0:42.0.4-slfo.1.1_6.1.x86_64",
                "product": {
                  "name": "python311-cryptography-0:42.0.4-slfo.1.1_6.1.x86_64",
                  "product_id": "python311-cryptography-0:42.0.4-slfo.1.1_6.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:python-cryptography_project:python-cryptography:42.0.4:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/python311-cryptography@42.0.4-slfo.1.1_6.1?arch=x86_64\u0026upstream=python-cryptography-0:42.0.4-slfo.1.1_6.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Micro 6.1",
                "product": {
                  "name": "SUSE Linux Micro 6.1",
                  "product_id": "SUSE Linux Micro 6.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sl-micro:6.1"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python311-cryptography-0:42.0.4-slfo.1.1_6.1.aarch64 as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:python311-cryptography-0:42.0.4-slfo.1.1_6.1.aarch64"
        },
        "product_reference": "python311-cryptography-0:42.0.4-slfo.1.1_6.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python311-cryptography-0:42.0.4-slfo.1.1_6.1.ppc64le as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:python311-cryptography-0:42.0.4-slfo.1.1_6.1.ppc64le"
        },
        "product_reference": "python311-cryptography-0:42.0.4-slfo.1.1_6.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python311-cryptography-0:42.0.4-slfo.1.1_6.1.s390x as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:python311-cryptography-0:42.0.4-slfo.1.1_6.1.s390x"
        },
        "product_reference": "python311-cryptography-0:42.0.4-slfo.1.1_6.1.s390x",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python311-cryptography-0:42.0.4-slfo.1.1_6.1.x86_64 as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:python311-cryptography-0:42.0.4-slfo.1.1_6.1.x86_64"
        },
        "product_reference": "python311-cryptography-0:42.0.4-slfo.1.1_6.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-69248",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-69248"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In versions 45.0.0 through 48.0.0, if an intermediate constrained CA permits the DNS name foo.example.com, and the leaf certificate has a wildcard in its DNS SAN of *.example.com, python-cryptography\u0027s verifier accepts which allows escaping outside of the permitted names. The core issue is in DNSConstraint::matches, where a wildcard pattern was treated as matching a more-specific permitted constraint even though *.example.com can expand to sibling names such as bar.example.com outside foo.example.com. This allows acceptance of an invalid certificate chain. This issue is fixed in 49.0.0.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:python311-cryptography-0:42.0.4-slfo.1.1_6.1.aarch64",
          "SUSE Linux Micro 6.1:python311-cryptography-0:42.0.4-slfo.1.1_6.1.ppc64le",
          "SUSE Linux Micro 6.1:python311-cryptography-0:42.0.4-slfo.1.1_6.1.s390x",
          "SUSE Linux Micro 6.1:python311-cryptography-0:42.0.4-slfo.1.1_6.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-69248",
          "url": "https://www.suse.com/security/cve/CVE-2026-69248"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1273549 for CVE-2026-69248",
          "url": "https://bugzilla.suse.com/1273549"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:python311-cryptography-0:42.0.4-slfo.1.1_6.1.aarch64",
            "SUSE Linux Micro 6.1:python311-cryptography-0:42.0.4-slfo.1.1_6.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-cryptography-0:42.0.4-slfo.1.1_6.1.s390x",
            "SUSE Linux Micro 6.1:python311-cryptography-0:42.0.4-slfo.1.1_6.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:python311-cryptography-0:42.0.4-slfo.1.1_6.1.aarch64",
            "SUSE Linux Micro 6.1:python311-cryptography-0:42.0.4-slfo.1.1_6.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-cryptography-0:42.0.4-slfo.1.1_6.1.s390x",
            "SUSE Linux Micro 6.1:python311-cryptography-0:42.0.4-slfo.1.1_6.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-19T11:18:18Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-69248"
    },
    {
      "cve": "CVE-2026-69249",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-69249"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "python-cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In versions 42.0.0 through 48.0.0, when resolving invalid certificate chains that include duplicate copies of self-signed certificates, the processing recursively invokes the same candidate, leading to an exponential blowup. Although the limitation that the chain depth cannot exceed a specified maximum depth prevents unbounded recursion and guarantees termination, an attacker-controlled certificate chain can lead the processing to easily take more than 5s to reject in testing. This amplification could form the basis for a resource exhaustion denial of service attack. The core issue arises in the recursive nature of build_chain_inner, which does not de-duplicate against previously analyzed candidates. As the correctness of validation is not affected, the integrity of a system cannot be compromised through this vector, only its availability. This issue is fixed in 49.0.0.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:python311-cryptography-0:42.0.4-slfo.1.1_6.1.aarch64",
          "SUSE Linux Micro 6.1:python311-cryptography-0:42.0.4-slfo.1.1_6.1.ppc64le",
          "SUSE Linux Micro 6.1:python311-cryptography-0:42.0.4-slfo.1.1_6.1.s390x",
          "SUSE Linux Micro 6.1:python311-cryptography-0:42.0.4-slfo.1.1_6.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-69249",
          "url": "https://www.suse.com/security/cve/CVE-2026-69249"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1273516 for CVE-2026-69249",
          "url": "https://bugzilla.suse.com/1273516"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:python311-cryptography-0:42.0.4-slfo.1.1_6.1.aarch64",
            "SUSE Linux Micro 6.1:python311-cryptography-0:42.0.4-slfo.1.1_6.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-cryptography-0:42.0.4-slfo.1.1_6.1.s390x",
            "SUSE Linux Micro 6.1:python311-cryptography-0:42.0.4-slfo.1.1_6.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:python311-cryptography-0:42.0.4-slfo.1.1_6.1.aarch64",
            "SUSE Linux Micro 6.1:python311-cryptography-0:42.0.4-slfo.1.1_6.1.ppc64le",
            "SUSE Linux Micro 6.1:python311-cryptography-0:42.0.4-slfo.1.1_6.1.s390x",
            "SUSE Linux Micro 6.1:python311-cryptography-0:42.0.4-slfo.1.1_6.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-19T11:18:18Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-69249"
    }
  ]
}

CVE-2026-69248 (GCVE-0-2026-69248)

Vulnerability from cvelistv5 – Published: 2026-08-03 21:21 – Updated: 2026-09-02 13:26

Title

python-cryptography verifier accepts wildcard DNS names allowing escape from permittedSubtrees

Summary

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In versions 45.0.0 through 48.0.0, if an intermediate constrained CA permits the DNS name foo.example.com, and the leaf certificate has a wildcard in its DNS SAN of *.example.com, python-cryptography's verifier accepts which allows escaping outside of the permitted names. The core issue is in DNSConstraint::matches, where a wildcard pattern was treated as matching a more-specific permitted constraint even though *.example.com can expand to sibling names such as bar.example.com outside foo.example.com. This allows acceptance of an invalid certificate chain. This issue is fixed in 49.0.0.

Severity

6.9 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:P

SSVC

Exploitation: poc Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-04 13:34 UTC

CWE

CWE-295 - Improper Certificate Validation

Assigner

GitHub_M mitre root

References

3 references

URL	Tags
https://github.com/pyca/cryptography/security/adv…	x_refsource_CONFIRM
https://github.com/pyca/cryptography/pull/14888	x_refsource_MISC
https://github.com/pyca/cryptography/commit/4d035…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
pyca	cryptography	Affected: < 49.0.0

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-69248",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-04T13:34:32.304052Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-04T15:04:51.587Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/pyca/cryptography/security/advisories/GHSA-m2h6-j472-rp4c"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "cryptography",
          "vendor": "pyca",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 49.0.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In versions 45.0.0 through 48.0.0, if an intermediate constrained CA permits the DNS name foo.example.com, and the leaf certificate has a wildcard in its DNS SAN of *.example.com, python-cryptography\u0027s verifier accepts which allows escaping outside of the permitted names. The core issue is in DNSConstraint::matches, where a wildcard pattern was treated as matching a more-specific permitted constraint even though *.example.com can expand to sibling names such as bar.example.com outside foo.example.com. This allows acceptance of an invalid certificate chain. This issue is fixed in 49.0.0."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 6.9,
            "baseSeverity": "MEDIUM",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:P",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "LOW",
            "vulnIntegrityImpact": "HIGH"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-295",
              "description": "CWE-295: Improper Certificate Validation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-02T13:26:35.057Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/pyca/cryptography/security/advisories/GHSA-m2h6-j472-rp4c",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/pyca/cryptography/security/advisories/GHSA-m2h6-j472-rp4c"
        },
        {
          "name": "https://github.com/pyca/cryptography/pull/14888",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/pyca/cryptography/pull/14888"
        },
        {
          "name": "https://github.com/pyca/cryptography/commit/4d035a4225965edeffd312079a510ef25fcfdcb2",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/pyca/cryptography/commit/4d035a4225965edeffd312079a510ef25fcfdcb2"
        }
      ],
      "source": {
        "advisory": "GHSA-m2h6-j472-rp4c",
        "discovery": "UNKNOWN"
      },
      "title": "python-cryptography verifier accepts wildcard DNS names allowing escape from permittedSubtrees"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-69248",
    "datePublished": "2026-08-03T21:21:43.710Z",
    "dateReserved": "2026-08-03T19:54:19.852Z",
    "dateUpdated": "2026-09-02T13:26:35.057Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-69249 (GCVE-0-2026-69249)

Vulnerability from cvelistv5 – Published: 2026-08-03 21:26 – Updated: 2026-09-04 21:20

Title

python-cryptography: Duplicate self-signed intermediates can cause exponential path-building

Summary

python-cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In versions 42.0.0 through 48.0.0, when resolving invalid certificate chains that include duplicate copies of self-signed certificates, the processing recursively invokes the same candidate, leading to an exponential blowup. Although the limitation that the chain depth cannot exceed a specified maximum depth prevents unbounded recursion and guarantees termination, an attacker-controlled certificate chain can lead the processing to easily take more than 5s to reject in testing. This amplification could form the basis for a resource exhaustion denial of service attack. The core issue arises in the recursive nature of build_chain_inner, which does not de-duplicate against previously analyzed candidates. As the correctness of validation is not affected, the integrity of a system cannot be compromised through this vector, only its availability. This issue is fixed in 49.0.0.

Severity

8.7 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

SSVC

Exploitation: poc Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-04 14:08 UTC

CWE

CWE-400 - Uncontrolled Resource Consumption

Assigner

GitHub_M mitre root

References

5 references

URL	Tags
https://github.com/pyca/cryptography/security/adv…	x_refsource_CONFIRM
https://github.com/pyca/cryptography/pull/14960	x_refsource_MISC
https://github.com/pyca/cryptography/commit/3763aa79b	x_refsource_MISC
https://github.com/pyca/cryptography/commit/4a12c…	x_refsource_MISC
https://github.com/pypa/advisory-database/tree/ma…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
pyca	cryptography	Affected: >= 42.0.0, < 49.0.0

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-69249",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-04T14:08:23.254769Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-04T14:08:58.056Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/pyca/cryptography/security/advisories/GHSA-jwv3-5hgf-82ww"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "cryptography",
          "vendor": "pyca",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 42.0.0, \u003c 49.0.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "python-cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In versions 42.0.0 through 48.0.0, when resolving invalid certificate chains that include duplicate copies of self-signed certificates, the processing recursively invokes the same candidate, leading to an exponential blowup. Although the limitation that the chain depth cannot exceed a specified maximum depth prevents unbounded recursion and guarantees termination, an attacker-controlled certificate chain can lead the processing to easily take more than 5s to reject in testing. This amplification could form the basis for a resource exhaustion denial of service attack. The core issue arises in the recursive nature of build_chain_inner, which does not de-duplicate against previously analyzed candidates. As the correctness of validation is not affected, the integrity of a system cannot be compromised through this vector, only its availability. This issue is fixed in 49.0.0."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-400",
              "description": "CWE-400: Uncontrolled Resource Consumption",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-04T21:20:32.666Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/pyca/cryptography/security/advisories/GHSA-jwv3-5hgf-82ww",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/pyca/cryptography/security/advisories/GHSA-jwv3-5hgf-82ww"
        },
        {
          "name": "https://github.com/pyca/cryptography/pull/14960",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/pyca/cryptography/pull/14960"
        },
        {
          "name": "https://github.com/pyca/cryptography/commit/3763aa79b",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/pyca/cryptography/commit/3763aa79b"
        },
        {
          "name": "https://github.com/pyca/cryptography/commit/4a12cf49675a184e47f912b00b04f3a629283582",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/pyca/cryptography/commit/4a12cf49675a184e47f912b00b04f3a629283582"
        },
        {
          "name": "https://github.com/pypa/advisory-database/tree/main/vulns/cryptography/PYSEC-2026-3553.yaml",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/pypa/advisory-database/tree/main/vulns/cryptography/PYSEC-2026-3553.yaml"
        }
      ],
      "source": {
        "advisory": "GHSA-jwv3-5hgf-82ww",
        "discovery": "UNKNOWN"
      },
      "title": "python-cryptography: Duplicate self-signed intermediates can cause exponential path-building"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-69249",
    "datePublished": "2026-08-03T21:26:45.826Z",
    "dateReserved": "2026-08-03T19:54:19.852Z",
    "dateUpdated": "2026-09-04T21:20:32.666Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

SUSE-SU-2026:23196-1

CVE-2026-69248 (GCVE-0-2026-69248)

CVE-2026-69249 (GCVE-0-2026-69249)

Tags

Sightings

Nomenclature

Related by attack behaviour