Executive brief
X.400 address type confusion in X.509 `GeneralName`
Affected products
- crates.io openssl-src
- PyPI cryptography
Junglewise Threat Intelligence
CVE-2023-0286: RUSTSEC-2023-0006 - X.400 address type confusion in X.509 `GeneralName`
CVE-2023-0286 · Severity: low · CVSS 3.1 · Published 2023-02-07
Technologies: openssl-src (crates.io), cryptography (PyPI). Vendors: crates.io, PyPI.
Related threats
- pyca cryptography improper certificate validation in Name Constraints
- Pyca Cryptography exponential path-building in X.509 verification
- pyca cryptography Bleichenbacher oracle in PKCS#7 decryption
- PYSEC-2026-1284 - Vulnerable OpenSSL included in cryptography wheels
- PYSEC-2026-1283 - Python Cryptography package vulnerable to Bleichenbacher timing oracle attack