CVE-2024-26130
HighAdvisory
Published 21 Feb 2024In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.008
- 56th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 184
- of 17,781 indexed, latest versions
- Container images
- 186
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
cryptography NULL pointer dereference with pkcs12.serialize_key_and_certificates when called with a non-matching certificate and private key and an hmac_hash override
Carried by container images the latest versions of 184 of 17,781 indexed charts deploy, on 186 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| cryptographypypi | 1.9, 2.3, 2.4.1, 2.5+27 more | 42.0.4 | 186 |
| python-cryptographydeb | 38.0.4-3, 41.0.7-4build3 | 38.0.4-3+deb12u1, 41.0.7-4ubuntu0.1 | 2 |
- OSV records
- DEBIAN-CVE-2024-26130GHSA-6vqw-3v5j-54x4PYSEC-2024-225UBUNTU-CVE-2024-26130
- Also known as
- USN-6673-3
Charts affected
184 by stars
Container images carrying it
186 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| matrixdotorg/ | def97fd537d8 | cryptography | 42.0.4 | 1 |
| milesmcc/ | ba54f7797a6b | cryptography | 42.0.4 | 1 |
| mirrorgitlabcontainers/ | 9efd73993c34 | cryptography | 42.0.4 | 1 |
| mozilla/ | 016162bf39d8 | cryptography | 42.0.4 | 1 |
| mysql/ | e4ea36622cdd | cryptography | 42.0.4 | 1 |
| ncsapolyglot/ | 438d82cdbdb5 | cryptography | 42.0.4 | 1 |
| opendatacube/ | 91870111837c | cryptography | 42.0.4 | 1 |
| opendatacube/ | 1b90cdf68831 | cryptography | 42.0.4 | 1 |
| openspeedtest/ | d4d62f4b7d85 | cryptography | 42.0.4 | 1 |
| openvpn/ | 2253c10ec652 | cryptography | 42.0.4 | 1 |
| openwhisk/ | c80dba0de3aa | cryptography | 42.0.4 | 1 |
| pangeo/ | 5fbe688a4f80 | cryptography | 42.0.4 | 1 |
| pnnlmiscscripts/ | 155131891741 | cryptography | 42.0.4 | 1 |
| pnnlmiscscripts/ | 8af4b7551d40 | cryptography | 42.0.4 | 1 |
| pryorda/ | 79925e63e59f | cryptography | 42.0.4 | 1 |
| pschiffe/ | 37ebba8c2b8f | cryptography | 42.0.4 | 1 |
| pyaephyohein/ | fdee05f2d441 | cryptography | 42.0.4 | 1 |
| qichenxu4pd/ | d758d41d9c6b | cryptography | 42.0.4 | 1 |
| qonstrukt/ | 089af7925aa1 | cryptography | 42.0.4 | 1 |
| redash/ | 9392753c0376 | cryptography | 42.0.4 | 1 |
| redislabs/ | b03ab1426d0d | cryptography | 42.0.4 | 1 |
| saltstack/ | e9c7906b7a5c | cryptography | 42.0.4 | 1 |
| samueldg/ | 3987195edbe6 | cryptography | 42.0.4 | 1 |
| seafileltd/ | 6693911bcc40 | cryptography | 42.0.4 | 1 |
| seafileltd/ | 70628f29c663 | cryptography | 42.0.4 | 1 |
| seafileltd/ | 7ac833196f60 | cryptography | 42.0.4 | 1 |
| seldonio/ | 4e985d2006a8 | cryptography | 42.0.4 | 1 |
| semaphoreui/ | 5b50bc11833f | cryptography | 42.0.4 | 1 |
| someblackmagic/ | 6eca64b6b440 | cryptography | 42.0.4 | 1 |
| stackstorm/ | 88235ba70cad | cryptography | 42.0.4 | 1 |
| stackstorm/ | 6f56d239d280 | cryptography | 42.0.4 | 1 |
| stackstorm/ | 33ecfda16608 | cryptography | 42.0.4 | 1 |
| stackstorm/ | 4e3f8c7ca52d | cryptography | 42.0.4 | 1 |
| stackstorm/ | f190a6212195 | cryptography | 42.0.4 | 1 |
| stackstorm/ | 259503496ff9 | cryptography | 42.0.4 | 1 |
| stackstorm/ | b1de2055c362 | cryptography | 42.0.4 | 1 |
| stackstorm/ | b1a338f64773 | cryptography | 42.0.4 | 1 |
| stackstorm/ | 1c8904a3bf67 | cryptography | 42.0.4 | 1 |
| stackstorm/ | 1bf35bfaf00c | cryptography | 42.0.4 | 1 |
| stackstorm/ | 19fdfffdbba8 | cryptography | 42.0.4 | 1 |
| streamnative/ | ebcf7f033b54 | cryptography | 42.0.4 | 1 |
| supabase/ | aa1c92c0cf32 | cryptography | 42.0.4 | 1 |
| svtechnmaa/ | 67be2aba9436 | cryptography | 42.0.4 | 1 |
| svtechnmaa/ | 6e368ace0977 | cryptography | 42.0.4 | 1 |
| tachyongroup/ | 7e79b9000856 | cryptography | 42.0.4 | 1 |
| tachyongroup/ | f4f7fabe1037 | cryptography | 42.0.4 | 1 |
| voltha/ | c4e41e92f046 | cryptography | 42.0.4 | 1 |
| voltha/ | 37f80524c207 | cryptography | 42.0.4 | 1 |
| voltha/ | 9ee8c1f4428c | cryptography | 42.0.4 | 1 |
| voltha/ | 655c3048a602 | cryptography | 42.0.4 | 1 |