pysec - pysec-2018-23

pysec-2018-23

Vulnerability from pysec

Published

2018-10-08 15:29

Modified

2021-06-10 06:50

Details

Python Cryptographic Authority pyopenssl version prior to version 17.5.0 contains a CWE-416: Use After Free vulnerability in X509 object handling that can result in Use after free can lead to possible denial of service or remote code execution.. This attack appear to be exploitable via Depends on the calling application and if it retains a reference to the memory.. This vulnerability appears to have been fixed in 17.5.0.

Aliases

JSON

To clipboard

{
  "affected": [
    {
      "package": {
        "ecosystem": "PyPI",
        "name": "pyopenssl",
        "purl": "pkg:pypi/pyopenssl"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "17.5.0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "0.10",
        "0.11",
        "0.12",
        "0.13",
        "0.13.1",
        "0.14",
        "0.15",
        "0.15.1",
        "0.6",
        "0.7",
        "0.8",
        "0.9",
        "16.0.0",
        "16.1.0",
        "16.2.0",
        "17.0.0",
        "17.1.0",
        "17.2.0",
        "17.3.0",
        "17.4.0"
      ]
    }
  ],
  "aliases": [
    "CVE-2018-1000807",
    "GHSA-p28m-34f6-967q"
  ],
  "details": "Python Cryptographic Authority pyopenssl version prior to version 17.5.0 contains a CWE-416: Use After Free vulnerability in X509 object handling that can result in Use after free can lead to possible denial of service or remote code execution.. This attack appear to be exploitable via Depends on the calling application and if it retains a reference to the memory.. This vulnerability appears to have been fixed in 17.5.0.",
  "id": "PYSEC-2018-23",
  "modified": "2021-06-10T06:50:39.370732Z",
  "published": "2018-10-08T15:29:00Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://github.com/pyca/pyopenssl/pull/723"
    },
    {
      "type": "WEB",
      "url": "https://usn.ubuntu.com/3813-1/"
    },
    {
      "type": "ADVISORY",
      "url": "https://access.redhat.com/errata/RHSA-2019:0085"
    },
    {
      "type": "WEB",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00014.html"
    },
    {
      "type": "ADVISORY",
      "url": "https://github.com/advisories/GHSA-p28m-34f6-967q"
    }
  ]
}

cve-2018-1000807

Vulnerability from cvelistv5

Published

2018-10-08 00:00

Modified

2024-08-05 12:47

Severity ?

Summary

References

▼	URL	Tags
	https://github.com/pyca/pyopenssl/pull/723
	https://access.redhat.com/errata/RHSA-2019:0085	vendor-advisory
	https://usn.ubuntu.com/3813-1/	vendor-advisory
	http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00014.html	vendor-advisory
	https://github.com/pyca/pyopenssl/commit/e73818600065821d588af475b024f4eb518c3509

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T12:47:56.674Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/pyca/pyopenssl/pull/723"
          },
          {
            "name": "RHSA-2019:0085",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:0085"
          },
          {
            "name": "USN-3813-1",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3813-1/"
          },
          {
            "name": "openSUSE-SU-2019:1104",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00014.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/pyca/pyopenssl/commit/e73818600065821d588af475b024f4eb518c3509"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "dateAssigned": "2018-10-05T00:00:00",
      "datePublic": "2017-11-29T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Python Cryptographic Authority pyopenssl version prior to version 17.5.0 contains a CWE-416: Use After Free vulnerability in X509 object handling that can result in Use after free can lead to possible denial of service or remote code execution.. This attack appear to be exploitable via Depends on the calling application and if it retains a reference to the memory.. This vulnerability appears to have been fixed in 17.5.0."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-11-17T22:10:00.975790",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://github.com/pyca/pyopenssl/pull/723"
        },
        {
          "name": "RHSA-2019:0085",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:0085"
        },
        {
          "name": "USN-3813-1",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://usn.ubuntu.com/3813-1/"
        },
        {
          "name": "openSUSE-SU-2019:1104",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00014.html"
        },
        {
          "url": "https://github.com/pyca/pyopenssl/commit/e73818600065821d588af475b024f4eb518c3509"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-1000807",
    "datePublished": "2018-10-08T00:00:00",
    "dateReserved": "2018-09-20T00:00:00",
    "dateUpdated": "2024-08-05T12:47:56.674Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

ghsa-p28m-34f6-967q

Vulnerability from github

Published

2018-10-10 16:10

Modified

2024-10-15 16:03

Severity ?

8.1 (High) - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

PyOpenSSL Use-After-Free vulnerability

Details

It was discovered that pyOpenSSL incorrectly handled memory when handling X509 objects. A remote attacker could use this issue to cause pyOpenSSL to crash, resulting in a denial of service, or possibly execute arbitrary code. This attack appears to be exploitable via Depends on the calling application and if it retains a reference to the memory. This vulnerability appears to have been fixed in 17.5.0.

Show details on source website

JSON

To clipboard

{
  "affected": [
    {
      "package": {
        "ecosystem": "PyPI",
        "name": "pyopenssl"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "17.5.0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "aliases": [
    "CVE-2018-1000807"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-416"
    ],
    "github_reviewed": true,
    "github_reviewed_at": "2020-06-16T21:47:43Z",
    "nvd_published_at": "2018-10-08T15:29:00Z",
    "severity": "HIGH"
  },
  "details": "It was discovered that pyOpenSSL incorrectly handled memory when handling X509 objects. A remote attacker could use this issue to cause pyOpenSSL to crash, resulting in a denial of service, or possibly execute arbitrary code. This attack appears to be exploitable via Depends on the calling application and if it retains a reference to the memory. This vulnerability appears to have been fixed in 17.5.0.",
  "id": "GHSA-p28m-34f6-967q",
  "modified": "2024-10-15T16:03:16Z",
  "published": "2018-10-10T16:10:38Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1000807"
    },
    {
      "type": "WEB",
      "url": "https://github.com/pyca/pyopenssl/pull/723"
    },
    {
      "type": "WEB",
      "url": "https://github.com/pyca/pyopenssl/commit/e73818600065821d588af475b024f4eb518c3509"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2019:0085"
    },
    {
      "type": "PACKAGE",
      "url": "https://github.com/pyca/pyopenssl"
    },
    {
      "type": "WEB",
      "url": "https://github.com/pypa/advisory-database/tree/main/vulns/pyopenssl/PYSEC-2018-23.yaml"
    },
    {
      "type": "WEB",
      "url": "https://usn.ubuntu.com/3813-1"
    },
    {
      "type": "WEB",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00014.html"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ],
  "summary": "PyOpenSSL Use-After-Free vulnerability"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

pysec-2018-23

Vulnerability from pysec

cve-2018-1000807

Vulnerability from cvelistv5

ghsa-p28m-34f6-967q

Vulnerability from github

Tags

Sightings

Nomenclature