PyPI/pykmip CVE-2018-1000872: medium 6.5, EPSS 1.29%

PyKMIP Denial of service vulnerability

Action: Upgrade pykmip to 0.8.0 or later.

pip install pykmip==0.8.0

Affected

Fixed versions

Sources

• osv: GHSA-gfv6-cj92-g3hx
• https://nvd.nist.gov/vuln/detail/CVE-2018-1000872
• https://github.com/OpenKMIP/PyKMIP/issues/430
• https://github.com/OpenKMIP/PyKMIP/commit/3a7b880bdf70d295ed8af3a5880bab65fa6b3932
• https://github.com/OpenKMIP/PyKMIP
• https://github.com/advisories/GHSA-gfv6-cj92-g3hx
• https://github.com/pypa/advisory-database/tree/main/vulns/pykmip/PYSEC-2018-22.yaml

CVE-2018-1000872 · published 2018-12-21T17:46:39Z · modified 2024-10-23T16:18:37.376170Z · JSON