Lucene search

K
githubGitHub Advisory DatabaseGHSA-P28M-34F6-967Q
HistoryOct 10, 2018 - 4:10 p.m.

PyOpenSSL Use-After-Free vulnerability

2018-10-1016:10:38
CWE-416
GitHub Advisory Database
github.com
11

0.094 Low

EPSS

Percentile

94.7%

It was discovered that pyOpenSSL incorrectly handled memory when handling X509 objects. A remote attacker could use this issue to cause pyOpenSSL to crash, resulting in a denial of service, or possibly execute arbitrary code. This attack appears to be exploitable via Depends on the calling application and if it retains a reference to the memory. This vulnerability appears to have been fixed in 17.5.0.

CPENameOperatorVersion
pyopenssllt17.5.0