PT-2018-9531 · Openssl+2 · Pyopenssl+2
Reaperhulk
·
Publicado
2018-10-08
·
Atualizado
2024-10-23
·
CVE-2018-1000807
CVSS v3.1
8.1
Alta
| Vetor | AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
pyopenssl versions prior to 17.5.0
Description
The issue is related to a Use After Free vulnerability in X509 object handling, which can result in denial of service or possible remote code execution. This attack appears to be exploitable via the calling application if it retains a reference to the memory.
Recommendations
For versions prior to 17.5.0, update to version 17.5.0 or later to resolve the issue. As a temporary workaround, consider restricting the handling of X509 objects to minimize the risk of exploitation.
Correção
DoS
RCE
Use After Free
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Suse
Ubuntu
Pyopenssl