CVE-2018-1000807

Related Files

Red Hat Security Advisory 2019-0085-01

Posted Jan 17, 2019

Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2019-0085-01 - The pyOpenSSL packages provide a high-level wrapper around a subset of the OpenSSL library for the Python programming language. Issues addressed include an use-after-free vulnerability.

tags | advisory, python

systems | linux, redhat

advisories | CVE-2018-1000807, CVE-2018-1000808

SHA-256 | 91641b5fb25e7abbac9e4446fed551ad7f23f78b51824bf4ad24f00327749515

Download | Favorite | View

Ubuntu Security Notice USN-3813-1

Posted Nov 8, 2018

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 3813-1 - It was discovered that pyOpenSSL incorrectly handled memory when handling X509 objects. A remote attacker could use this issue to cause pyOpenSSL to crash, resulting in a denial of service, or possibly execute arbitrary code. It was discovered that pyOpenSSL incorrectly handled memory when performing operations on a PKCS #12 store. A remote attacker could possibly use this issue to cause pyOpenSSL to consume resources, resulting in a denial of service. Various other issues were also addressed.

tags | advisory, remote, denial of service, arbitrary

systems | linux, ubuntu

advisories | CVE-2018-1000807, CVE-2018-1000808

SHA-256 | 313db7b64ed82d0750998f91458e9a3ee0f6496ddb09d3a4f8dcfbe5c8c80145

Download | Favorite | View