Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2018-1000872

Опубликовано: 24 апр. 2018
Источник: redhat
CVSS3: 7.5
EPSS Низкий

Описание

OpenKMIP PyKMIP version All versions before 0.8.0 contains a CWE 399: Resource Management Errors (similar issue to CVE-2015-5262) vulnerability in PyKMIP server that can result in DOS: the server can be made unavailable by one or more clients opening all of the available sockets. This attack appear to be exploitable via A client or clients open sockets with the server and then never close them. This vulnerability appears to have been fixed in 0.8.0.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat OpenStack Platform 13 (Queens)python-pykmipFix deferred
Red Hat OpenStack Platform 14 (Rocky)python-pykmipAffected

Показывать по

Дополнительная информация

Статус:

Low
Дефект:
CWE-400
https://bugzilla.redhat.com/show_bug.cgi?id=1665592python-pykmip: DoS due to undefined default timeout for all server sockets

EPSS

Процентиль: 51%
0.00284
Низкий

7.5 High

CVSS3

Связанные уязвимости

CVSS3: 6.5
ubuntu
около 7 лет назад

OpenKMIP PyKMIP version All versions before 0.8.0 contains a CWE 399: Resource Management Errors (similar issue to CVE-2015-5262) vulnerability in PyKMIP server that can result in DOS: the server can be made unavailable by one or more clients opening all of the available sockets. This attack appear to be exploitable via A client or clients open sockets with the server and then never close them. This vulnerability appears to have been fixed in 0.8.0.

CVSS3: 6.5
nvd
около 7 лет назад

OpenKMIP PyKMIP version All versions before 0.8.0 contains a CWE 399: Resource Management Errors (similar issue to CVE-2015-5262) vulnerability in PyKMIP server that can result in DOS: the server can be made unavailable by one or more clients opening all of the available sockets. This attack appear to be exploitable via A client or clients open sockets with the server and then never close them. This vulnerability appears to have been fixed in 0.8.0.

CVSS3: 6.5
debian
около 7 лет назад

OpenKMIP PyKMIP version All versions before 0.8.0 contains a CWE 399: ...

CVSS3: 6.5
github
около 7 лет назад

PyKMIP Denial of service vulnerability

EPSS

Процентиль: 51%
0.00284
Низкий

7.5 High

CVSS3