SecPod SCAP Repo, a repository of SCAP Content (CVE, CCE, CPE, CWE, OVAL and XCCDF)

Download | Alert*

OVAL

[3.5] py-cryptography: HKDF might return an empty byte-string (CVE-2016-9243)

ID: oval:org.secpod.oval:def:1800261	Date: (C)2018-03-28 (M)2023-11-10
Class: PATCH	Family: unix

Fixed a bug where HKDF would return an emptybyte-string if used with a length less than algorithm.digest_size. Fixed In Version py-cryptography 1.5.3 Reference Patch

Platform:

Alpine Linux 3.5

Product:

py-cryptography

Reference:

6514

CVE-2016-9243


30479



423868



248392



909



195452



282