PT-2017-6648 · Tlslite · Tlslite

Vasyl Kaigorodov · Publicado 2017-06-13 · Atualizado 2022-05-14 · CVE-2015-3220

Positive Technologies (AI Summary)

CVSS v4.0

8.7

Alta

Vetor base

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions tlslite versions prior to 0.4.9

Description The issue allows remote attackers to trigger a denial of service, resulting in a runtime exception and process crash.

Recommendations For versions prior to 0.4.9, update to version 0.4.9 or later to resolve the issue.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2015-3220

GHSA-4749-P7RX-8JJJ

PYSEC-2017-96

Produtos afetados

Tlslite

Referências · 9

• https://github.com/pypa/advisory-database/tree/main/vulns/tlslite/PYSEC-2017-96.yaml · Nota
• https://github.com/trevp/tlslite · Nota
• https://github.com/trevp/tlslite/commit/aca8d4f898b436ff6754e1a9ab96cae976c8a853 · Correção
• https://osv.dev/vulnerability/PYSEC-2017-96 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2015-3220 · Nota de Segurança
• https://groups.google.com/forum/#%21topic/tlslite-dev/MoWE7B0A4iU · Nota
• https://bugzilla.redhat.com/show_bug.cgi?id=1254215 · Nota
• https://groups.google.com/forum/#!topic/tlslite-dev/MoWE7B0A4iU · Nota
• https://osv.dev/vulnerability/GHSA-4749-p7rx-8jjj · Aviso do Fabricante