rpm package
suse/python-setuptools&distro=SUSE Linux Enterprise Server 12 SP4
pkg:rpm/suse/python-setuptools&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4
Vulnerabilities (3)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2018-1000808 | Med | 5.9 | < 18.0.1-4.8.1 | 18.0.1-4.8.1 | Oct 8, 2018 | Python Cryptographic Authority pyopenssl version Before 17.5.0 contains a CWE - 401 : Failure to Release Memory Before Removing Last Reference vulnerability in PKCS #12 Store that can result in Denial of service if memory runs low or is exhausted. This attack appear to be exploit | |
| CVE-2018-1000807 | Hig | 8.1 | < 18.0.1-4.8.1 | 18.0.1-4.8.1 | Oct 8, 2018 | Python Cryptographic Authority pyopenssl version prior to version 17.5.0 contains a CWE-416: Use After Free vulnerability in X509 object handling that can result in Use after free can lead to possible denial of service or remote code execution.. This attack appear to be exploitab | |
| CVE-2016-9015 | Low | 3.7 | < 40.6.2-4.12.23 | 40.6.2-4.12.23 | Jan 11, 2017 | Versions 1.17 and 1.18 of the Python urllib3 library suffer from a vulnerability that can cause them, in certain configurations, to not correctly validate TLS certificates. This places users of the library with those configurations at risk of man-in-the-middle and information lea |
- affected < 18.0.1-4.8.1fixed 18.0.1-4.8.1
Python Cryptographic Authority pyopenssl version Before 17.5.0 contains a CWE - 401 : Failure to Release Memory Before Removing Last Reference vulnerability in PKCS #12 Store that can result in Denial of service if memory runs low or is exhausted. This attack appear to be exploit
- affected < 18.0.1-4.8.1fixed 18.0.1-4.8.1
Python Cryptographic Authority pyopenssl version prior to version 17.5.0 contains a CWE-416: Use After Free vulnerability in X509 object handling that can result in Use after free can lead to possible denial of service or remote code execution.. This attack appear to be exploitab
- affected < 40.6.2-4.12.23fixed 40.6.2-4.12.23
Versions 1.17 and 1.18 of the Python urllib3 library suffer from a vulnerability that can cause them, in certain configurations, to not correctly validate TLS certificates. This places users of the library with those configurations at risk of man-in-the-middle and information lea