tlslite remote denial of service vulnerability

2022-05-1403:07:28

Google

osv.dev

0.004 Low

EPSS

Percentile

75.0%

JSON

The tlslite library before 0.4.9 for Python allows remote attackers to trigger a denial of service (runtime exception and process crash).

CPENameOperatorVersion
tlsliteeq0.4.8
tlsliteeq0.4.4
tlsliteeq0.4.7
tlsliteeq0.3.8
tlsliteeq0.4.0
tlsliteeq0.4.3
tlsliteeq0.4.6
tlsliteeq0.4.2
tlsliteeq0.4.1
tlsliteeq0.4.5

Name	Operator	Version
tlslite	eq	0.4.8
tlslite	eq	0.4.4
tlslite	eq	0.4.7
tlslite	eq	0.3.8
tlslite	eq	0.4.0
tlslite	eq	0.4.3
tlslite	eq	0.4.6
tlslite	eq	0.4.2
tlslite	eq	0.4.1
tlslite	eq	0.4.5

References

bugzilla.redhat.com/show_bug.cgi?id=1254215

github.com/trevp/tlslite/commit/aca8d4f898b436ff6754e1a9ab96cae976c8a853

groups.google.com/forum/#!topic/tlslite-dev/MoWE7B0A4iU

nvd.nist.gov/vuln/detail/CVE-2015-3220

0.004 Low

EPSS

Percentile

75.0%

JSON

Related for OSV:GHSA-4749-P7RX-8JJJ