CVE-2013-1895: Fedoraproject Fedora

High severity, CVSS 7.5. EPSS: 2.8% chance of exploitation in the next 30 days.

The py-bcrypt module before 0.3 for Python does not properly handle concurrent memory access, which allows attackers to bypass authentication via multiple authentication requests, which trigger the password hash to be overwritten.

Affected products

• Fedoraproject Fedora: version 17 only; version 18 only
• Python Py-Bcrypt: before 0.3 (fixed in 0.3)

Published 2020-01-28. Last modified 2026-06-16.