Inappropriate coding practices In py-openssl
Description
PyOpenSSL Use-After-Free vulnerability It was discovered that pyOpenSSL incorrectly handled memory when handling X509 objects. A remote attacker could use this issue to cause pyOpenSSL to crash, resulting in a denial of service, or possibly execute arbitrary code. This attack appears to be exploitable via Depends on the calling application and if it retains a reference to the memory. This vulnerability appears to have been fixed in 17.5.0.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 alpine v3.7 | 17.5.0-r0 | ||
alpine v3.8 | 17.5.0-r0 | ||
 debian 11 | 17.5.0-1 | ||
debian 14 | 17.5.0-1 | ||
debian 13 | 17.5.0-1 | ||
alpine v3.6 | 17.5.0-r0 | ||
 pypi | 17.5.0 | ||
debian 12 | 17.5.0-1 |
Aliases
1. 2. 3. 4. 5. 6. 7. 8. 9.
References
1. 2. 3. 4. 5.