Skip to content
OpenAdvisories
High USN-3813-1 2 CVEs

pyopenssl vulnerabilities

Published Nov 8, 2018 · Updated Feb 10, 2026

Ecosystem: Ubuntu

Summary

It was discovered that pyOpenSSL incorrectly handled memory when handling
X509 objects. A remote attacker could use this issue to cause pyOpenSSL to
crash, resulting in a denial of service, or possibly execute arbitrary
code. (CVE-2018-1000807)

It was discovered that pyOpenSSL incorrectly handled memory when performing
operations on a PKCS #12 store. A remote attacker could possibly use this
issue to cause pyOpenSSL to consume resources, resulting in a denial of
service. (CVE-2018-1000808)

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 16.04 LTS 16.04:LTS pyopenssl 0.15.1-2ubuntu0.2

Vulnerabilities 2

  • High 8.1
    CVE-2018-1000807

    PyOpenSSL Use-After-Free vulnerability

    Python Cryptographic Authority pyopenssl version prior to version 17.5.0 contains a CWE-416: Use After Free vulnerability in X509 object handling that can result in Use after free can lead to possible denial of service or remote code execution.. This attack a…

    pyopenssl pyopenssl pyopenssl py-openssl Debian Ubuntu Alpine PyPI
  • Medium 5.9
    CVE-2018-1000808

    Pyopenssl Incorrect Memory Management

    Python Cryptographic Authority pyopenssl version Before 17.5.0 contains a CWE - 401 : Failure to Release Memory Before Removing Last Reference vulnerability in PKCS #12 Store that can result in Denial of service if memory runs low or is exhausted. This attack…

    pyopenssl pyopenssl pyopenssl py-openssl Debian Ubuntu Alpine PyPI

References

  • report
    https://ubuntu.com/security/CVE-2018-1000807
  • report
    https://ubuntu.com/security/CVE-2018-1000808