Description:

CVE-2024-26130 is a vulnerability in the cryptography package for Python. It allows an attacker to cause a NULL pointer dereference and crash the Python process by calling pkcs12.serialize_key_and_certificates with a certificate whose public key does not match the provided private key and an encryption_algorithm with hmac_hash set.

Key Insights:

• The SVRS of 30 indicates a moderate risk, but the vulnerability is actively exploited in the wild, making it a critical threat.
• The vulnerability can be exploited by attackers to crash Python processes, potentially leading to denial-of-service attacks.
• The vulnerability affects all versions of cryptography prior to 42.0.4.

Mitigation Strategies:

• Update to cryptography version 42.0.4 or later.
• Avoid using pkcs12.serialize_key_and_certificates with a certificate whose public key does not match the provided private key and an encryption_algorithm with hmac_hash set.
• Use a vulnerability scanner to identify and patch vulnerable systems.

Additional Information:

• The Cybersecurity and Infrastructure Security Agency (CISA) has warned of the vulnerability, calling for immediate and necessary measures.
• Threat actors or APT groups are actively exploiting the vulnerability.
• If users have additional queries regarding this incident, they can use the 'Ask to Analyst' feature, contact SOCRadar directly, or open a support ticket for more information if necessary.