PyPI/tlslite CVE-2015-3220: unknown, EPSS 3.23%
The tlslite library before 0.4.9 for Python allows remote attackers to trigger a denial of service (runtime exception and process crash).
Action: Upgrade tlslite to 0.4.9 or later.
pip install tlslite==0.4.9Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.4.9 | - |
Fixed versions
| 0.4.9 |
Sources
- osv: PYSEC-2017-96
- https://github.com/trevp/tlslite/commit/aca8d4f898b436ff6754e1a9ab96cae976c8a853
- https://bugzilla.redhat.com/show_bug.cgi?id=1254215
- https://groups.google.com/forum/#!topic/tlslite-dev/MoWE7B0A4iU
- https://github.com/advisories/GHSA-4749-p7rx-8jjj
CVE-2015-3220 · published · modified · JSON