CVE

Id
96063  
CVE No.
CVE-2016-9243  
Status
Candidate  
Description
HKDF in cryptography before 1.5.2 returns an empty byte-string if used with a length less than algorithm.digest_size.  
Phase
Assigned (20161109)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
799884 96063 CVE-2016-9243 MLIST:[oss-security] 20161109 Re: CVE Request: Cryptography 1.5.3: HKDF might return an empty byte-string  View
799885 96063 CVE-2016-9243 URL:http://www.openwall.com/lists/oss-security/2016/11/09/2  View
799886 96063 CVE-2016-9243 CONFIRM:https://cryptography.io/en/latest/changelog  View
799887 96063 CVE-2016-9243 CONFIRM:https://github.com/pyca/cryptography/commit/b924696b2e8731f39696584d12cceeb3aeb2d874  View
799888 96063 CVE-2016-9243 CONFIRM:https://github.com/pyca/cryptography/issues/3211  View
799889 96063 CVE-2016-9243 FEDORA:FEDORA-2016-2d90e27e50  View
799890 96063 CVE-2016-9243 URL:https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U23KDR2M2N7W2ZSREG63BVW7D4VC6CIZ/  View
799891 96063 CVE-2016-9243 FEDORA:FEDORA-2016-d3a2b640ce  View
799892 96063 CVE-2016-9243 URL:https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WQ5G7KHKZC4SI23JE7277KZXM57GEQKT/  View
799893 96063 CVE-2016-9243 FEDORA:FEDORA-2016-e77c8c1f3b  View
799894 96063 CVE-2016-9243 URL:https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5R2ZOBMPWDFFHUZ6QOZZY36A6H5CGJXL/  View
799895 96063 CVE-2016-9243 UBUNTU:UBUNTU-3138-1  View
799896 96063 CVE-2016-9243 URL:http://www.ubuntu.com/usn/USN-3138-1  View
799897 96063 CVE-2016-9243 BID:94216  View

Related JVN