Lack of protection against brute force attacks In python-bcrypt
Description
Improper Restriction of Excessive Authentication Attempts in py-bcrypt The py-bcrypt module before 0.3 for Python does not properly handle concurrent memory access, which allows attackers to bypass authentication via multiple authentication requests, which trigger the password hash to be overwritten.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 debian 11 | 0.4-1 | ||
debian 13 | 0.4-1 | ||
 pypi | 0.3 | ||
debian 12 | 0.4-1 | ||
debian 14 | 0.4-1 |
Aliases
1. 2. 3. 4. 5. 6. 7.
References
1. 2. 3. 4. 5.