GHSA-P28M-34F6-967Q PyOpenSSL Use-After-Free vulnerability

It was discovered that pyOpenSSL incorrectly handled memory when handling X509 objects. A remote attacker could use this issue to cause pyOpenSSL to crash, resulting in a denial of service, or possibly execute arbitrary code. This attack appears to be exploitable via Depends on the calling...

netlib (0.16.0), pyupdater (>=1.0.1, <=1.1.11) +2 more potentially affected by CVE-2018-1000807 via pyopenssl (0.15.1)

pyopenssl PYPI version 0.15.1 is affected by a known vulnerability. The following packages have a transitive dependency on pyopenssl and may be impacted: - netlib 0.16.0 - pyupdater =1.0.1, =0.4.2, =0.3.1, =0.4.0 Source cves: CVE-2018-1000807 Source advisory: OSV:GHSA-P28M-34F6-967Q...

burp-ui (>=0.5.0, <=0.5.1), chakraversiontracker (>=1.2.1.20160901, <=1.2.1.20160917) +36 more potentially affected by CVE-2018-1000807 via pyopenssl (>=17.0.0, <=17.4.0)

pyopenssl PYPI version =17.0.0, =0.5.0, =1.2.1.20160901, =0.5.0, =0.3.0, =0.2.4, =0.9.2, =0.9.7, =1.3.12, =0.2.0, =1.3.13, =2.2.0, =1.15.0, =1.15.0, =1.15.0, =1.15.0, =1.27.0 and more Source cves: CVE-2018-1000807 Source advisory: OSV:GHSA-P28M-34F6-967Q...

PyOpenSSL Use-After-Free vulnerability

It was discovered that pyOpenSSL incorrectly handled memory when handling X509 objects. A remote attacker could use this issue to cause pyOpenSSL to crash, resulting in a denial of service, or possibly execute arbitrary code. This attack appears to be exploitable via Depends on the calling...

burp-ui (>=0.4.1, <=0.4.4), data-pipeline (>=0.9.5, <=0.9.12) +1 more potentially affected by CVE-2018-1000807 via pyopenssl (16.0.0)

pyopenssl PYPI version 16.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pyopenssl and may be impacted: - burp-ui =0.4.1, =0.9.5, =0.2.10.3, =0.2.10.4 Source cves: CVE-2018-1000807 Source advisory: OSV:GHSA-P28M-34F6-967Q...

python-glanceclient (0.14.3) potentially affected by CVE-2018-1000807 via pyopenssl (0.13.0)

pyopenssl PYPI version 0.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on pyopenssl and may be impacted: - python-glanceclient 0.14.3 Source cves: CVE-2018-1000807 Source advisory: OSV:GHSA-P28M-34F6-967Q...

certbot-pinned (0.17.0), crossbar (17.3.1) +43 more potentially affected by CVE-2018-1000807 via pyopenssl (16.2.0)

pyopenssl PYPI version 16.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on pyopenssl and may be impacted: - certbot-pinned 0.17.0 - crossbar 17.3.1 - django-afip =2.2.0, =1.9.5, =1.1.1, =1.0.2, =1.0.2, =1.0.2, =0.0.1, =0.0.1, =1.0.2, =1.0.2, =1.0.3...

mozapkpublisher (>=0.1.0, <=0.1.4) potentially affected by CVE-2018-1000807 via pyopenssl (16.1.0)

pyopenssl PYPI version 16.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pyopenssl and may be impacted: - mozapkpublisher =0.1.0, =0.1.4 Source cves: CVE-2018-1000807 Source advisory: OSV:GHSA-P28M-34F6-967Q...

burp-ui (>=0.5.0, <=0.5.1), chakraversiontracker (>=1.2.1.20160901, <=1.2.1.20160917) +36 more potentially affected by CVE-2018-1000807 via pyopenssl (>=17.0.0, <=17.4.0)

pyopenssl PYPI version =17.0.0, =0.5.0, =1.2.1.20160901, =0.5.0, =0.3.0, =0.2.4, =0.9.2, =0.9.7, =1.3.12, =0.2.0, =1.3.13, =2.2.0, =1.15.0, =1.15.0, =1.15.0, =1.15.0, =1.27.0 and more Source cves: CVE-2018-1000807 Source advisory: GHSA-P28M-34F6-967Q...

toughradius (>=0.9.4, <=0.9.6), traffic (2.6.2) potentially affected by CVE-2018-1000807 via pyopenssl (0.14.0)

pyopenssl PYPI version 0.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on pyopenssl and may be impacted: - toughradius =0.9.4, =0.9.6 - traffic 2.6.2 Source cves: CVE-2018-1000807 Source advisory: OSV:GHSA-P28M-34F6-967Q...

burp-ui (>=0.5.0, <=0.5.1), chakraversiontracker (>=1.2.1.20160901, <=1.2.1.20160917) +36 more potentially affected by CVE-2018-1000808 via pyopenssl (>=17.0.0, <=17.4.0)

pyopenssl PYPI version =17.0.0, =0.5.0, =1.2.1.20160901, =0.5.0, =0.3.0, =0.2.4, =0.9.2, =0.9.7, =1.3.12, =0.2.0, =1.3.13, =2.2.0, =1.15.0, =1.15.0, =1.15.0, =1.15.0, =1.27.0 and more Source cves: CVE-2018-1000808 Source advisory: OSV:GHSA-2RCM-PHC9-3945...

certbot-pinned (0.17.0), crossbar (17.3.1) +43 more potentially affected by CVE-2018-1000808 via pyopenssl (16.2.0)

pyopenssl PYPI version 16.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on pyopenssl and may be impacted: - certbot-pinned 0.17.0 - crossbar 17.3.1 - django-afip =2.2.0, =1.9.5, =1.1.1, =1.0.2, =1.0.2, =1.0.2, =0.0.1, =0.0.1, =1.0.2, =1.0.2, =1.0.3...

burp-ui (>=0.4.1, <=0.4.4), data-pipeline (>=0.9.5, <=0.9.12) +1 more potentially affected by CVE-2018-1000808 via pyopenssl (16.0.0)

pyopenssl PYPI version 16.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pyopenssl and may be impacted: - burp-ui =0.4.1, =0.9.5, =0.2.10.3, =0.2.10.4 Source cves: CVE-2018-1000808 Source advisory: OSV:GHSA-2RCM-PHC9-3945...

Pyopenssl Incorrect Memory Management

It was discovered that pyOpenSSL incorrectly handled memory when performing operations on a PKCS 12 store. A remote attacker could possibly use this issue to cause pyOpenSSL to consume resources, resulting in a denial of service. This attack appear to be exploitable via Depends upon calling...

GHSA-2RCM-PHC9-3945 Pyopenssl Incorrect Memory Management

It was discovered that pyOpenSSL incorrectly handled memory when performing operations on a PKCS 12 store. A remote attacker could possibly use this issue to cause pyOpenSSL to consume resources, resulting in a denial of service. This attack appear to be exploitable via Depends upon calling...

mozapkpublisher (>=0.1.0, <=0.1.4) potentially affected by CVE-2018-1000808 via pyopenssl (16.1.0)

pyopenssl PYPI version 16.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pyopenssl and may be impacted: - mozapkpublisher =0.1.0, =0.1.4 Source cves: CVE-2018-1000808 Source advisory: OSV:GHSA-2RCM-PHC9-3945...

burp-ui (>=0.5.0, <=0.5.1), chakraversiontracker (>=1.2.1.20160901, <=1.2.1.20160917) +36 more potentially affected by CVE-2018-1000808 via pyopenssl (>=17.0.0, <=17.4.0)

pyopenssl PYPI version =17.0.0, =0.5.0, =1.2.1.20160901, =0.5.0, =0.3.0, =0.2.4, =0.9.2, =0.9.7, =1.3.12, =0.2.0, =1.3.13, =2.2.0, =1.15.0, =1.15.0, =1.15.0, =1.15.0, =1.27.0 and more Source cves: CVE-2018-1000808 Source advisory: GHSA-2RCM-PHC9-3945...

python-glanceclient (0.14.3) potentially affected by CVE-2018-1000808 via pyopenssl (0.13.0)

pyopenssl PYPI version 0.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on pyopenssl and may be impacted: - python-glanceclient 0.14.3 Source cves: CVE-2018-1000808 Source advisory: OSV:GHSA-2RCM-PHC9-3945...

alauda (0.2.2) potentially affected by CVE-2018-1000808 via pyopenssl (0.13.1)

pyopenssl PYPI version 0.13.1 is affected by a known vulnerability. The following packages have a transitive dependency on pyopenssl and may be impacted: - alauda 0.2.2 Source cves: CVE-2018-1000808 Source advisory: OSV:GHSA-2RCM-PHC9-3945...

toughradius (>=0.9.4, <=0.9.6), traffic (2.6.2) potentially affected by CVE-2018-1000808 via pyopenssl (0.14.0)

pyopenssl PYPI version 0.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on pyopenssl and may be impacted: - toughradius =0.9.4, =0.9.6 - traffic 2.6.2 Source cves: CVE-2018-1000808 Source advisory: OSV:GHSA-2RCM-PHC9-3945...