https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 14:33:06 +0000 https://cve.radiocsirt.org/vuln/brew-azure-cli-cve-2018-1000808 <p><strong>Affected:</strong> Homebrew: azure-cli</p> <p>It was discovered that pyOpenSSL incorrectly handled memory when performing operations on a PKCS #12 store. A remote attacker could possibly use this issue to cause pyOpenSSL to consume resources, resulting in a denial of service.</p> <p>This attack appear to be exploitable via Depends upon calling application, however it could be as simple as initiating a TLS connection that would cause the calling application to reload certificates from a PKCS #12 store. This vulnerability appears to have been fixed in 17.5.0.</p> <p><strong>Affected:</strong> Homebrew: azure-cli</p> <p>It was discovered that pyOpenSSL incorrectly handled memory when performing operations on a PKCS #12 store. A remote attacker could possibly use this issue to cause pyOpenSSL to consume resources, resulting in a denial of service.</p> <p>This attack appear to be exploitable via Depends upon calling application, however it could be as simple as initiating a TLS connection that would cause the calling application to reload certificates from a PKCS #12 store. This vulnerability appears to have been fixed in 17.5.0.</p> https://cve.radiocsirt.org/vuln/brew-azure-cli-cve-2018-1000808 https://cve.radiocsirt.org/vuln/euvd-2026-71254 EUVD-2026-71254 https://cve.radiocsirt.org/vuln/euvd-2026-71254 https://cve.radiocsirt.org/vuln/fkie_cve-2018-1000808 <p>Python Cryptographic Authority pyopenssl version Before 17.5.0 contains a CWE - 401 : Failure to Release Memory Before Removing Last Reference vulnerability in PKCS #12 Store that can result in Denial of service if memory runs low or is exhausted. This attack appear to be exploitable via Depends upon calling application, however it could be as simple as initiating a TLS connection. Anything that would cause the calling application to reload certificates from a PKCS #12 store.. This vulnerability appears to have been fixed in 17.5.0.</p> <p>Python Cryptographic Authority pyopenssl version Before 17.5.0 contains a CWE - 401 : Failure to Release Memory Before Removing Last Reference vulnerability in PKCS #12 Store that can result in Denial of service if memory runs low or is exhausted. This attack appear to be exploitable via Depends upon calling application, however it could be as simple as initiating a TLS connection. Anything that would cause the calling application to reload certificates from a PKCS #12 store.. This vulnerability appears to have been fixed in 17.5.0.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-1000808 https://cve.radiocsirt.org/vuln/ghsa-2rcm-phc9-3945 <p><strong>Affected:</strong> PyPI: pyopenssl</p> <p>It was discovered that pyOpenSSL incorrectly handled memory when performing operations on a PKCS #12 store. A remote attacker could possibly use this issue to cause pyOpenSSL to consume resources, resulting in a denial of service.</p> <p>This attack appear to be exploitable via Depends upon calling application, however it could be as simple as initiating a TLS connection that would cause the calling application to reload certificates from a PKCS #12 store. This vulnerability appears to have been fixed in 17.5.0.</p> <p><strong>Affected:</strong> PyPI: pyopenssl</p> <p>It was discovered that pyOpenSSL incorrectly handled memory when performing operations on a PKCS #12 store. A remote attacker could possibly use this issue to cause pyOpenSSL to consume resources, resulting in a denial of service.</p> <p>This attack appear to be exploitable via Depends upon calling application, however it could be as simple as initiating a TLS connection that would cause the calling application to reload certificates from a PKCS #12 store. This vulnerability appears to have been fixed in 17.5.0.</p> https://cve.radiocsirt.org/vuln/ghsa-2rcm-phc9-3945 https://cve.radiocsirt.org/vuln/gsd-2018-1000808 gsd-2018-1000808 https://cve.radiocsirt.org/vuln/gsd-2018-1000808 https://cve.radiocsirt.org/vuln/pysec-2018-24 <p><strong>Affected:</strong> PyPI: pyopenssl</p> <p>Python Cryptographic Authority pyopenssl version Before 17.5.0 contains a CWE - 401 : Failure to Release Memory Before Removing Last Reference vulnerability in PKCS #12 Store that can result in Denial of service if memory runs low or is exhausted. This attack appear to be exploitable via Depends upon calling application, however it could be as simple as initiating a TLS connection. Anything that would cause the calling application to reload certificates from a PKCS #12 store.. This vulnerability appears to have been fixed in 17.5.0.</p> <p><strong>Affected:</strong> PyPI: pyopenssl</p> <p>Python Cryptographic Authority pyopenssl version Before 17.5.0 contains a CWE - 401 : Failure to Release Memory Before Removing Last Reference vulnerability in PKCS #12 Store that can result in Denial of service if memory runs low or is exhausted. This attack appear to be exploitable via Depends upon calling application, however it could be as simple as initiating a TLS connection. Anything that would cause the calling application to reload certificates from a PKCS #12 store.. This vulnerability appears to have been fixed in 17.5.0.</p> https://cve.radiocsirt.org/vuln/pysec-2018-24 https://cve.radiocsirt.org/vuln/rhsa-2019:0085 <p>pyOpenSSL: Use-after-free in X509 object handling pyOpenSSL: Failure to release memory before removing last reference in PKCS #12 Store</p> <p>pyOpenSSL: Use-after-free in X509 object handling pyOpenSSL: Failure to release memory before removing last reference in PKCS #12 Store</p> https://cve.radiocsirt.org/vuln/rhsa-2019:0085 https://cve.radiocsirt.org/vuln/suse-su-2018:4063-1 <p>Security update for python-cryptography, python-pyOpenSSL</p> <p>Security update for python-cryptography, python-pyOpenSSL</p> https://cve.radiocsirt.org/vuln/suse-su-2018:4063-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-1000808 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: pyopenssl</p> <p>Python Cryptographic Authority pyopenssl version Before 17.5.0 contains a CWE - 401 : Failure to Release Memory Before Removing Last Reference vulnerability in PKCS #12 Store that can result in Denial of service if memory runs low or is exhausted. This attack appear to be exploitable via Depends upon calling application, however it could be as simple as initiating a TLS connection. Anything that would cause the calling application to reload certificates from a PKCS #12 store.. This vulnerability appears to have been fixed in 17.5.0.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: pyopenssl</p> <p>Python Cryptographic Authority pyopenssl version Before 17.5.0 contains a CWE - 401 : Failure to Release Memory Before Removing Last Reference vulnerability in PKCS #12 Store that can result in Denial of service if memory runs low or is exhausted. This attack appear to be exploitable via Depends upon calling application, however it could be as simple as initiating a TLS connection. Anything that would cause the calling application to reload certificates from a PKCS #12 store.. This vulnerability appears to have been fixed in 17.5.0.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-1000808 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1099 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in python-crypto ausnutzen, um beliebigen Programmcode auszuführen und um einen Denial of Service Zustand herbeizuführen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in python-crypto ausnutzen, um beliebigen Programmcode auszuführen und um einen Denial of Service Zustand herbeizuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1099