Lucene search

K
githubGitHub Advisory DatabaseGHSA-2RCM-PHC9-3945
HistoryOct 10, 2018 - 4:10 p.m.

Pyopenssl Incorrect Memory Management

2018-10-1016:10:23
CWE-401
CWE-404
GitHub Advisory Database
github.com
9

0.003 Low

EPSS

Percentile

68.6%

It was discovered that pyOpenSSL incorrectly handled memory when performing operations on a PKCS #12 store. A remote attacker could possibly use this issue to cause pyOpenSSL to consume resources, resulting in a denial of service.

This attack appear to be exploitable via Depends upon calling application, however it could be as simple as initiating a TLS connection that would cause the calling application to reload certificates from a PKCS #12 store. This vulnerability appears to have been fixed in 17.5.0.

CPENameOperatorVersion
pyopenssllt17.5.0