CVE-2013-1895

Description

The py-bcrypt module before 0.3 for Python does not properly handle concurrent memory access, which allows attackers to bypass authentication via multiple authentication requests, which trigger the password hash to be overwritten.

Risk Information

Base Score

7.5

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS Score

Exploitation Probability

0.279

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2013-1895 are fixed in Python-py-bcrypt 0.3	Windows
Vulnerabilities CVE-2013-1895 are fixed in Python-py-bcrypt for linux 0.3	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234