Lucene search
+L

27 matches found

SUSE Linux
SUSE Linux
•added 2026/07/30 11:07 a.m.•23 views

Security update for python3-pyOpenSSL

This update for python3-pyOpenSSL fixes the following issue: CVE-2026-27448: unhandled exception in settlsextservernamecallback callback can result in connection not being cancelled and allows for possible security measure bypassing bsc1259804. Patch Instructions: To install this SUSE update use...

6.3CVSS5.6AI score0.00407EPSS
SaveExploits0References4
osv_suse
osv_suse
•added 2026/07/30 11:07 a.m.•14 views

SUSE-SU-2026:3424-1 Security update for python3-pyOpenSSL

This update for python3-pyOpenSSL fixes the following issue: - CVE-2026-27448: unhandled exception in settlsextservernamecallback callback can result in connection not being cancelled and allows for possible security measure bypassing bsc1259804...

6.3CVSS5.5AI score0.00407EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/06/27 12:00 a.m.•20 views

EulerOS 2.0 SP15 : pyOpenSSL (EulerOS-SA-2026-2458)

According to the versions of the pyOpenSSL packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 22.0.0 and prior to version 26.0.0, if a user provided callback t...

9.8CVSS6.1AI score0.00916EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/06/12 12:00 a.m.•34 views

EulerOS Virtualization 2.13.0 : pyOpenSSL (EulerOS-SA-2026-2414)

According to the versions of the pyOpenSSL packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 0.14.0 and prior to version 26.0.0, if a user...

6.3CVSS5.4AI score0.00407EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/06/10 12:00 a.m.•21 views

EulerOS 2.0 SP13 : pyOpenSSL (EulerOS-SA-2026-2308)

According to the versions of the pyOpenSSL packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 0.14.0 and prior to version 26.0.0, if a user provided callback t...

6.3CVSS5.5AI score0.00407EPSS
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
•added 2026/05/21 3:10 p.m.•24 views

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a security bypass in pyOpenSSL [CVE-2026-27448, CVE-2026-27459]

Summary IBM Watson Speech Services Cartridge is vulnerable to a security bypass in pyOpenSSL due to a flaw allowing user provided callback to settlsextservernamecallback. This raises an unhandled exception, resulting in connections being accepted that could allow bypassing of security-sensitive...

9.8CVSS5.9AI score0.00916EPSS
SaveExploits0Affected Software1
osv_clsa
osv_clsa
•added 2026/05/19 9:09 a.m.•24 views

CLSA-2026-1779181743 pyOpenSSL: Fix of CVE-2026-27448

CVE-2026-27448: fix fail-open in settlsextservernamecallback when callback raises exception...

6.3CVSS5.4AI score0.00407EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/05/04 12:18 p.m.•28 views

Security Bulletin: pyOpenSSL TLS SNI Callback Exception Handling Flaw Allows Security Bypass

Summary pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 0.14.0 and prior to version 26.0.0, if a user provided callback to settlsextservernamecallback raised an unhandled exception, this would result in a connection being accepted. If a user was relying on this...

9.8CVSS6.2AI score0.00916EPSS
SaveExploits0Affected Software1
osv_clsa
osv_clsa
•added 2026/04/13 4:38 p.m.•21 views

CLSA-2026-1776098295 pyOpenSSL: Fix of CVE-2026-27448

CVE-2026-27448: fix fail-open in settlsextservernamecallback when callback raises exception...

6.3CVSS5.4AI score0.00407EPSS
SaveExploits0References1
osv_mgasa
osv_mgasa
•added 2026/03/31 11:05 p.m.•24 views

MGASA-2026-0074 Updated python-openssl packages fix security vulnerabilities

pyOpenSSL allows TLS connection bypass via unhandled callback exception in settlsextservernamecallback. CVE-2026-27448 pyOpenSSL DTLS cookie callback buffer overflow. CVE-2026-27459...

9.8CVSS6.3AI score0.00916EPSS
SaveExploits0References6
osv_oesa
osv_oesa
•added 2026/03/27 11:10 a.m.•23 views

OESA-2026-1730 pyOpenSSL security update

pyOpenSSL is a rather thin wrapper around a subset of the OpenSSL library. With thin wrapper we mean that a lot of the object methods do nothing more than calling a corresponding function in the OpenSSL library. Security Fixes: A security vulnerability exists in the PyOpenSSL library's...

9.8CVSS6.1AI score0.00916EPSS
SaveExploits0References3
osv_oesa
osv_oesa
•added 2026/03/27 11:10 a.m.•21 views

OESA-2026-1731 pyOpenSSL security update

pyOpenSSL is a rather thin wrapper around a subset of the OpenSSL library. With thin wrapper we mean that a lot of the object methods do nothing more than calling a corresponding function in the OpenSSL library. Security Fixes: A security vulnerability exists in the PyOpenSSL library's...

9.8CVSS6.1AI score0.00916EPSS
SaveExploits0References3
osv_oesa
osv_oesa
•added 2026/03/27 11:10 a.m.•27 views

OESA-2026-1734 pyOpenSSL security update

pyOpenSSL is a rather thin wrapper around a subset of the OpenSSL library. With thin wrapper we mean that a lot of the object methods do nothing more than calling a corresponding function in the OpenSSL library. Security Fixes: A security vulnerability exists in the PyOpenSSL library's...

9.8CVSS6.1AI score0.00916EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/03/19 12:26 a.m.•16 views

SUSE CVE-2026-27448

pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 0.14.0 and prior to version 26.0.0, if a user provided callback to settlsextservernamecallback raised an unhandled exception, this would result in a connection being accepted. If a user was relying on this callback for...

3.7CVSS5.5AI score0.00407EPSS
SaveExploits0References20
PyPA
PyPA
•added 2026/03/18 12:16 a.m.•20 views

PYSEC-2026-2268

pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 0.14.0 and prior to version 26.0.0, if a user provided callback to settlsextservernamecallback raised an unhandled exception, this would result in a connection being accepted. If a user was relying on this callback for...

6.3CVSS5.5AI score0.00407EPSS
SaveExploits0References3Affected Software1
osv_azl
osv_azl
•added 2026/03/18 12:16 a.m.•23 views

AZL-80031 CVE-2026-27448 affecting package pyOpenSSL for versions less than 24.2.1-2

pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 0.14.0 and prior to version 26.0.0, if a user provided callback to settlsextservernamecallback raised an unhandled exception, this would result in a connection being accepted. If a user was relying on this callback for...

6.3CVSS5.5AI score0.00407EPSS
SaveExploits0References1
NVD
NVD
•added 2026/03/18 12:16 a.m.•19 views

CVE-2026-27448

pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 0.14.0 and prior to version 26.0.0, if a user provided callback to settlsextservernamecallback raised an unhandled exception, this would result in a connection being accepted. If a user was relying on this callback for...

6.3CVSS0.00407EPSS
SaveExploits0References3
osv_ubuntu
osv_ubuntu
•added 2026/03/18 12:00 a.m.•17 views

UBUNTU-CVE-2026-27448

pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 0.14.0 and prior to version 26.0.0, if a user provided callback to settlsextservernamecallback raised an unhandled exception, this would result in a connection being accepted. If a user was relying on this callback for...

6.3CVSS5.5AI score0.00407EPSS
SaveExploits0References5
AlpineLinux
AlpineLinux
•added 2026/03/17 11:24 p.m.•64 views

CVE-2026-27448

pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 0.14.0 and prior to version 26.0.0, if a user provided callback to settlsextservernamecallback raised an unhandled exception, this would result in a connection being accepted. If a user was relying on this callback for...

6.3CVSS5.5AI score0.00407EPSS
SaveExploits0
Cvelist
Cvelist
•added 2026/03/17 11:24 p.m.•71 views

CVE-2026-27448 pyOpenSSL allows TLS connection bypass via unhandled callback exception in set_tlsext_servername_callback

pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 0.14.0 and prior to version 26.0.0, if a user provided callback to settlsextservernamecallback raised an unhandled exception, this would result in a connection being accepted. If a user was relying on this callback for...

6.3CVSS0.00407EPSS
SaveExploits0References3
Rows per page
Query Builder