Homepage

NULL Pointer Dereference The advisory has been revoked - it doesn't affect any version of package python3x-ansible-compat  (opens in a new tab)

Threat Intelligence

EPSS
0.99% (58th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-RHEL10-PYTHON3XANSIBLECOMPAT-9899105
  • published7 Nov 2025
  • disclosed28 Nov 2023
Report a new vulnerability Found a mistake?

Introduced: 28 Nov 2023

CVE-2023-49083  (opens in a new tab)
CWE-476  (opens in a new tab)

Amendment

The Red Hat security team deemed this advisory irrelevant for RHEL:10.

NVD Description

Note: Versions mentioned in the description apply only to the upstream python3x-ansible-compat package and not the python3x-ansible-compat package as distributed by RHEL.

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Calling load_pem_pkcs7_certificates or load_der_pkcs7_certificates could lead to a NULL-pointer dereference and segfault. Exploitation of this vulnerability poses a serious risk of Denial of Service (DoS) for any application attempting to deserialize a PKCS7 blob/certificate. The consequences extend to potential disruptions in system availability and stability. This vulnerability has been patched in version 41.0.6.