Buffer Overflow

🗓️ 21 Mar 2026 05:21:40Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 2 Views

pyOpenSSL buffer overflow due to faulty bounds in set_cookie_generate_callback; cookies over 256 bytes overflow OpenSSL.

Reporter	Title	Published	Views	Family All 121
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a security bypass in pyOpenSSL [CVE-2026-27448, CVE-2026-27459]	21 May 202615:10	–	ibm
IBM Security Bulletins	Security Bulletin: pyOpenSSL TLS SNI Callback Exception Handling Flaw Allows Security Bypass	4 May 202612:18	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in pyOpenSSL bundled with IBM Fusion, IBM Fusion HCI, and IBM Fusion Data Cataloging	18 May 202622:19	–	ibm
IBM Security Bulletins	Security Bulletin: IBM SOAR QRadar Plugin App is vulnerable to using components with known vulnerabilities	6 May 202616:21	–	ibm
ATTACKERKB	CVE-2026-27459	17 Mar 202623:34	–	attackerkb
AlpineLinux	CVE-2026-27459	17 Mar 202623:34	–	alpinelinux
CBLMariner	CVE-2026-27459 affecting package pyOpenSSL for versions less than 24.2.1-2	25 Mar 202622:53	–	cbl_mariner
Chainguard	CVE-2026-27459 vulnerabilities	18 Mar 202601:17	–	cgr
Circl	CVE-2026-27459	23 Mar 202616:05	–	circl
CNNVD	pyOpenSSL 安全漏洞	17 Mar 202600:00	–	cnnvd

Vulners

Node

py3-openssl py3-opensslMatch19.1.0-r0python

AND

py3-openssl py3-opensslMatch21.0.0-r0python

AND

py3-openssl py3-opensslMatch23.3.0-r0python

AND

py3-openssl py3-opensslMatch24.1.0-r1python

AND

py3-openssl py3-opensslMatch23.2.0-r0python

AND

py3-openssl py3-opensslMatch25.3.0-r1python

AND

py3-openssl py3-opensslMatch25.3.0-r0python

AND

py3-openssl py3-opensslMatch23.1.1-r0python

AND

py3-openssl py3-opensslMatch20.0.1-r0python

AND

py3-openssl py3-opensslMatch21.0.0-r1python

AND

py3-openssl py3-opensslMatch22.1.0-r1python

AND

py3-openssl py3-opensslMatch20.0.1-r1python

AND

py3-openssl py3-opensslMatch22.1.0-r0python

AND

py3-openssl py3-opensslMatch24.1.0-r0python

AND

py3-openssl py3-opensslMatch24.3.0-r0python

AND

py3-openssl py3-opensslMatch25.0.0-r0python

AND

py3-openssl py3-opensslMatch23.1.1-r1python

AND

py3-openssl py3-opensslMatch23.0.0-r0python

AND

py3-openssl py3-opensslMatch22.1.0-r2python

AND

alpinelinux alpine_linuxMatchedge

py3-openssl py3-opensslMatch25.3.0-r0python

AND

alpinelinux alpine_linuxMatch3.23

pyopenssl pyopensslRange22.0.0–25.3.0python

pyopenssl pyopensslMatch22.0.0python

pyopenssl pyopensslMatch22.1.0python

pyopenssl pyopensslMatch23.0.0python

pyopenssl pyopensslMatch23.1.0python

pyopenssl pyopensslMatch23.1.1python

pyopenssl pyopensslMatch23.2.0python

pyopenssl pyopensslMatch23.3.0python

pyopenssl pyopensslMatch24.0.0python

pyopenssl pyopensslMatch24.1.0python

pyopenssl pyopensslMatch24.2.1python

pyopenssl pyopensslMatch24.3.0python

pyopenssl pyopensslMatch25.0.0python

pyopenssl pyopensslMatch25.1.0python

pyopenssl pyopensslMatch25.2.0python

Source	Link
github	www.github.com/pyca/pyopenssl/commit/57f09bb4bb051d3bc2a1abd36e9525313d5cd408
github	www.github.com/pyca/pyopenssl/security/advisories/GHSA-5pwr-322w-8jr4
github	www.github.com/pyca/pyopenssl/blob/358cbf29c4e364c59930e53a270116249581eaa3/CHANGELOG.rst

09 May 2026 05:36Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.19.8

CVSS 49.2

EPSS0.00027

SSVC