Pyopenssl

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2018-1000808 Oct 08, 15:29 PyPI MEDIUM PATCH This Month

Python Cryptographic Authority pyopenssl version Before 17.5.0 contains a CWE - 401 : Failure to Release Memory Before Removing Last Reference vulnerability in PKCS #12 Store that can result in. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required.

Denial Of Service Python Red Hat Canonical Enterprise Linux Desktop +6

NVD GitHub

CVSS 3.0

5.9

EPSS

1.9%

CVE-2018-1000807 Oct 08, 15:29 PyPI HIGH PATCH This Week

Python Cryptographic Authority pyopenssl version prior to version 17.5.0 contains a CWE-416: Use After Free vulnerability in X509 object handling that can result in Use after free can lead to. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required.

RCE Denial Of Service Python Use After Free Memory Corruption +8

NVD GitHub

CVSS 3.1

8.1

EPSS

4.1%

CVE-2013-4314 Sep 30, 21:55 PyPI MEDIUM PATCH This Month

The X509Extension in pyOpenSSL before 0.13.1 does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable.

Information Disclosure Canonical Ubuntu Linux Pyopenssl

NVD

CVSS 2.0

4.3

EPSS

0.2%

CVE-2018-1000808 PyPI

EPSS 2% CVSS 5.9

MEDIUM PATCH This Month

Denial Of Service Python Red Hat +8

NVD GitHub

CVE-2018-1000807 PyPI

EPSS 4% CVSS 8.1

HIGH PATCH This Week

RCE Denial Of Service Python +10

NVD GitHub

CVE-2013-4314 PyPI

EPSS 0% CVSS 4.3

MEDIUM PATCH This Month

Information Disclosure Canonical Ubuntu Linux +1

NVD