PyPI/pyopenssl CVE-2018-1000807: high 8.1, EPSS 4.08%

PyOpenSSL Use-After-Free vulnerability

Action: Upgrade pyopenssl to 17.5.0 or later.

pip install pyopenssl==17.5.0

Affected

Fixed versions

Sources

• osv: GHSA-p28m-34f6-967q
• https://nvd.nist.gov/vuln/detail/CVE-2018-1000807
• https://github.com/pyca/pyopenssl/pull/723
• https://github.com/pyca/pyopenssl/commit/e73818600065821d588af475b024f4eb518c3509
• https://access.redhat.com/errata/RHSA-2019:0085
• https://github.com/pyca/pyopenssl
• https://github.com/pypa/advisory-database/tree/main/vulns/pyopenssl/PYSEC-2018-23.yaml
• https://usn.ubuntu.com/3813-1
• http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00014.html

CVE-2018-1000807 · published 2018-10-10T16:10:38Z · modified 2024-10-15T16:39:23.634847Z · JSON