Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2018-1000807

Опубликовано: 08 окт. 2018
Источник: nvd
CVSS3: 8.1
CVSS2: 6.8
EPSS Низкий

Описание

Python Cryptographic Authority pyopenssl version prior to version 17.5.0 contains a CWE-416: Use After Free vulnerability in X509 object handling that can result in Use after free can lead to possible denial of service or remote code execution.. This attack appear to be exploitable via Depends on the calling application and if it retains a reference to the memory.. This vulnerability appears to have been fixed in 17.5.0.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:pyopenssl:pyopenssl:*:*:*:*:*:*:*:*
Версия до 17.5.0 (исключая)
Конфигурация 2
cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
Конфигурация 3

Одно из

cpe:2.3:a:redhat:openstack:13:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*

EPSS

Процентиль: 91%
0.04075
Низкий

8.1 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-416

Связанные уязвимости

ubuntu логотип

CVE-2018-1000807

CVSS3: 8.1
ubuntu
около 8 лет назад

Python Cryptographic Authority pyopenssl version prior to version 17.5.0 contains a CWE-416: Use After Free vulnerability in X509 object handling that can result in Use after free can lead to possible denial of service or remote code execution.. This attack appear to be exploitable via Depends on the calling application and if it retains a reference to the memory.. This vulnerability appears to have been fixed in 17.5.0.

redhat логотип

CVE-2018-1000807

CVSS3: 8.1
redhat
почти 9 лет назад

Python Cryptographic Authority pyopenssl version prior to version 17.5.0 contains a CWE-416: Use After Free vulnerability in X509 object handling that can result in Use after free can lead to possible denial of service or remote code execution.. This attack appear to be exploitable via Depends on the calling application and if it retains a reference to the memory.. This vulnerability appears to have been fixed in 17.5.0.

debian логотип

CVE-2018-1000807

CVSS3: 8.1
debian
около 8 лет назад

Python Cryptographic Authority pyopenssl version prior to version 17.5 ...

suse-cvrf логотип

SUSE-SU-2024:3749-1

suse-cvrf
около 2 лет назад

Security update for python-pyOpenSSL

github логотип

GHSA-p28m-34f6-967q

CVSS3: 8.1
github
около 8 лет назад

PyOpenSSL Use-After-Free vulnerability

EPSS

Процентиль: 91%
0.04075
Низкий

8.1 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-416