Description
OpenKMIP PyKMIP version All versions before 0.8.0 contains a CWE 399: Resource Management Errors (similar issue to CVE-2015-5262) vulnerability in PyKMIP server that can result in DOS: the server can be made unavailable by one or more clients opening all of the available sockets. This attack appear to be exploitable via A client or clients open sockets with the server and then never close them. This vulnerability appears to have been fixed in 0.8.0.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | python-pykmip | 0.7.0-3 | — |
| Debian 13 | python-pykmip | 0.7.0-3 | — |
| Debian 12 | python-pykmip | 0.7.0-3 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 26.10 | python-pykmip | No fix yet | — |
| Ubuntu 26.04 LTS | python-pykmip | No fix yet | — |
| Ubuntu 25.10 | python-pykmip | No fix yet | — |
| Ubuntu 24.04 LTS | python-pykmip | No fix yet | — |
| Ubuntu 22.04 LTS | python-pykmip | No fix yet | — |
Show 3 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 20.04 LTS | python-pykmip | No fix yet | — |
| Ubuntu 18.04 LTS | python-pykmip | No fix yet | — |
| Ubuntu 16.04 LTS | python-pykmip | No fix yet | — |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SUSE OpenStack Cloud Crowbar 8 | python-PyKMIP | 0.6.0-3.3.1 | SUSE-SU-2019:0391-1 |
| SUSE OpenStack Cloud 8 | python-PyKMIP | 0.6.0-3.3.1 | SUSE-SU-2019:0391-1 |
| SUSE OpenStack Cloud 7 | caasp-openstack-heat-templates | 1.0+git.1553079189.3bf8922-1.6.2 | SUSE-SU-2019:1450-1 |
| SUSE OpenStack Cloud 7 | crowbar | 4.0+git.1551088848.823bcaa3-7.29.2 | SUSE-SU-2019:1450-1 |
| SUSE OpenStack Cloud 7 | crowbar-core | 4.0+git.1556285635.ab602dd4d-9.46.3 | SUSE-SU-2019:1450-1 |
| SUSE OpenStack Cloud 7 | crowbar-ha | 4.0+git.1556181005.47c643d-4.46.3 | SUSE-SU-2019:1450-1 |
| SUSE OpenStack Cloud 7 | crowbar-openstack | 4.0+git.1554887450.ff7c30c1c-9.51.3 | SUSE-SU-2019:1450-1 |
| SUSE OpenStack Cloud 7 | galera-python-clustercheck | 0.0+git.1506329536.8f5878c-1.6.2 | SUSE-SU-2019:1450-1 |
| SUSE OpenStack Cloud 7 | openstack-ceilometer +1 | 7.1.1~dev4-4.15.3 | SUSE-SU-2019:1450-1 |
| SUSE OpenStack Cloud 7 | openstack-heat-gbp | 5.1.1~dev1-2.6.3 | SUSE-SU-2019:1450-1 |
| SUSE OpenStack Cloud 7 | python-PyKMIP | 0.5.0-3.3.3 | SUSE-SU-2019:1450-1 |
| SUSE OpenStack Cloud 7 | python-pysaml2 | 4.0.2-3.6.3 | SUSE-SU-2019:1450-1 |
| SUSE OpenStack Cloud 7 | rubygem-crowbar-client | 3.9.0-7.14.2 | SUSE-SU-2019:1450-1 |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SUSE HPE Helion OpenStack 8 | python-PyKMIP | 0.6.0-3.3.1 | SUSE-SU-2019:0391-1 |
| SUSE Enterprise Storage 4 | crowbar | 4.0+git.1551088848.823bcaa3-7.29.2 | SUSE-SU-2019:1450-1 |
| SUSE Enterprise Storage 4 | crowbar-core | 4.0+git.1556285635.ab602dd4d-9.46.3 | SUSE-SU-2019:1450-1 |
| SUSE Enterprise Storage 4 | rubygem-crowbar-client | 3.9.0-7.14.2 | SUSE-SU-2019:1450-1 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | pykmip | < 0.8.0 | 0.8.0 | GHSA-gfv6-cj92-g3hx |
Advisories 2
- SUSE-SU-2019:0391-1 Security update for python-PyKMIP SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2019:1450-1 Security update for Cloud7 packages SUSE / openSUSE Security Updates · Feb 4, 2026