| Package | Affected versions | Patched versions |
|---|---|---|
| pyopenssl | < 17.5.0 | 17.5.0 |
| pyopenssl | < 17.5.0 | 17.5.0 |
| gluster storage | = 3.0 | |
| openstack | = 13 |
It was discovered that pyOpenSSL incorrectly handled memory when performing operations on a PKCS #12 store. A remote attacker could possibly use this issue to cause pyOpenSSL to consume resources, resulting in a denial of service.
This attack appear to be exploitable via Depends upon calling application, however it could be as simple as initiating a TLS connection that would cause the calling application to reload certificates from a PKCS #12 store. This vulnerability appears to have been fixed in 17.5.0.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free