Resource exhaustion in pyopenssl - CVE-2018-1000808

Vulnerability identifier: #VU15783

CSH Severity: Low

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2018-1000808

CWE-ID: CWE-400

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to cause DoS condition on the target system.

The vulnerability exists due to improper release of memory before removing the last reference in a Public Key Cryptography Standards (PKCS) #12 store. A remote unauthenticated attacker can send a specially crafted request that submits malicious input, exhaust memory resources and to cause the application to reload certificates from a PKCS #12 store.

pyopenssl
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Server for SAP Applications 12
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
Opensuse
Red Hat OpenStack
Red Hat OpenStack for IBM Power
Red Hat OpenStack Director Deployment Tools
py-openssl (Alpine package)
python3-pyOpenSSL
python-pyOpenSSL

Update to version 17.5.0.

pyopenssl - update to 17.5
py-openssl (Alpine package) - update to 17.5.0-r0
python3-pyOpenSSL - update to 17.1.0-4.26.1
python-pyOpenSSL - update to 17.1.0-4.26.1

• https://github.com/pyca/pyopenssl/pull/723

• Multiple vulnerabilities in Python Cryptographic Authority pyopenssl
• OpenSUSE Linux update for python-cryptography
• Red Hat update for pyOpenSSL
• Resource exhaustion in py-openssl (Alpine package)
• SUSE update for python-pyOpenSSL