Python Cryptographic Authority pyopenssl version prior to version 17.5.0 contains a CWE-416: Use After Free vulnerability in X509 object handling that can result in Use after free can lead to possible denial of service or remote code execution.. This attack appear to be exploitable via Depends on the calling application and if it retains a reference to the memory.. This vulnerability appears to have been fixed in 17.5.0.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:3749-1 advisory.

    - Fixed error caused by a regression in fix for CVE-2018-1000807 (bsc#1231700)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:1626-1 advisory.

  - Python Cryptographic Authority pyopenssl version prior to version 17.5.0 contains a CWE-416: Use After     Free vulnerability in X509 object handling that can result in Use after free can lead to possible denial     of service or remote code execution.. This attack appear to be exploitable via Depends on the calling     application and if it retains a reference to the memory.. This vulnerability appears to have been fixed in     17.5.0. (CVE-2018-1000807)

  - Python Cryptographic Authority pyopenssl version Before 17.5.0 contains a CWE - 401 : Failure to Release     Memory Before Removing Last Reference vulnerability in PKCS #12 Store that can result in Denial of service     if memory runs low or is exhausted. This attack appear to be exploitable via Depends upon calling     application, however it could be as simple as initiating a TLS connection. Anything that would cause the     calling application to reload certificates from a PKCS #12 store.. This vulnerability appears to have been     fixed in 17.5.0. (CVE-2018-1000808)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This plugin has been deprecated as it does not adhere to established standards for this style of check.

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2019:0085 advisory.

    The pyOpenSSL packages provide a high-level wrapper around a subset of the OpenSSL library for the Python     programming language.

    Security Fix(es):

    * pyOpenSSL: Use-after-free in X509 object handling (CVE-2018-1000807)

    * pyOpenSSL: Failure to release memory before removing last reference in PKCS #12 Store (CVE-2018-1000808)

    For more details about the security issue(s), including the impact, a CVSS score, and other related     information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the pyOpenSSL package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - Python Cryptographic Authority pyopenssl version prior to version 17.5.0 contains a CWE-416: Use After     Free vulnerability in X509 object handling that can result in Use after free can lead to possible denial     of service or remote code execution.. This attack appear to be exploitable via Depends on the calling     application and if it retains a reference to the memory.. This vulnerability appears to have been fixed in     17.5.0. (CVE-2018-1000807)

  - Python Cryptographic Authority pyopenssl version Before 17.5.0 contains a CWE - 401 : Failure to Release     Memory Before Removing Last Reference vulnerability in PKCS #12 Store that can result in Denial of service     if memory runs low or is exhausted. This attack appear to be exploitable via Depends upon calling     application, however it could be as simple as initiating a TLS connection. Anything that would cause the     calling application to reload certificates from a PKCS #12 store.. This vulnerability appears to have been     fixed in 17.5.0. (CVE-2018-1000808)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the pyOpenSSL package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - Python Cryptographic Authority pyopenssl version Before     17.5.0 contains a CWE - 401 : Failure to Release Memory     Before Removing Last Reference vulnerability in PKCS     #12 Store that can result in Denial of service if     memory runs low or is exhausted. This attack appear to     be exploitable via Depends upon calling application,     however it could be as simple as initiating a TLS     connection. Anything that would cause the calling     application to reload certificates from a PKCS #12     store.. This vulnerability appears to have been fixed     in 17.5.0.(CVE-2018-1000808)

  - Python Cryptographic Authority pyopenssl version prior     to version 17.5.0 contains a CWE-416: Use After Free     vulnerability in X509 object handling that can result     in Use after free can lead to possible denial of     service or remote code execution.. This attack appear     to be exploitable via Depends on the calling     application and if it retains a reference to the     memory.. This vulnerability appears to have been fixed     in 17.5.0.(CVE-2018-1000807)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the pyOpenSSL package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - Python Cryptographic Authority pyopenssl version Before     17.5.0 contains a CWE - 401 : Failure to Release Memory     Before Removing Last Reference vulnerability in PKCS     #12 Store that can result in Denial of service if     memory runs low or is exhausted. This attack appear to     be exploitable via Depends upon calling application,     however it could be as simple as initiating a TLS     connection. Anything that would cause the calling     application to reload certificates from a PKCS #12     store.. This vulnerability appears to have been fixed     in 17.5.0.(CVE-2018-1000808)

  - Python Cryptographic Authority pyopenssl version prior     to version 17.5.0 contains a CWE-416: Use After Free     vulnerability in X509 object handling that can result     in Use after free can lead to possible denial of     service or remote code execution.. This attack appear     to be exploitable via Depends on the calling     application and if it retains a reference to the     memory.. This vulnerability appears to have been fixed     in 17.5.0.(CVE-2018-1000807)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for python-cryptography, python-pyOpenSSL fixes the following issues :

Security issues fixed :

  - CVE-2018-1000808: A memory leak due to missing reference     checking in PKCS#12 store handling was fixed     (bsc#1111634)

  - CVE-2018-1000807: A use-after-free in X509 object     handling was fixed (bsc#1111635)

This update also contains the following tracked bug fixes :

  - avoid bad interaction with python-cryptography package.
    (bsc#1021578)

  - Avoid regression accessesing non-existing attribute
    _from_raw_x509_ptr in object X509 (bsc#1119077)

  - Add python-setuptools as a requirement. (bsc#1052927)     This update was imported from the SUSE:SLE-12-SP2:Update     update project.

This update for python-cryptography, python-pyOpenSSL fixes the following issues :

Security issues fixed :

CVE-2018-1000808: A memory leak due to missing reference checking in PKCS#12 store handling was fixed (bsc#1111634)

CVE-2018-1000807: A use-after-free in X509 object handling was fixed (bsc#1111635)

avoid bad interaction with python-cryptography package. (bsc#1021578)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3813-1 advisory.

    It was discovered that pyOpenSSL incorrectly handled memory when handling X509 objects. A remote attacker     could use this issue to cause pyOpenSSL to crash, resulting in a denial of service, or possibly execute     arbitrary code. (CVE-2018-1000807)

    It was discovered that pyOpenSSL incorrectly handled memory when performing operations on a PKCS #12     store. A remote attacker could possibly use this issue to cause pyOpenSSL to consume resources, resulting     in a denial of service. (CVE-2018-1000808)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
209831	SUSE SLES12 Security Update : python-pyOpenSSL (SUSE-SU-2024:3749-1)	Nessus	SuSE Local Security Checks	high
196940	SUSE SLES12 Security Update : python-pyOpenSSL (SUSE-SU-2024:1626-1)	Nessus	SuSE Local Security Checks	high
196129	RHEL 8 : pyopenssl (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	high
194081	RHEL 7 : pyOpenSSL (RHSA-2019:0085)	Nessus	Red Hat Local Security Checks	high
170801	EulerOS Virtualization 3.0.2.2 : pyOpenSSL (EulerOS-SA-2023-1283)	Nessus	Huawei Local Security Checks	high
137948	EulerOS Virtualization 3.0.6.0 : pyOpenSSL (EulerOS-SA-2020-1729)	Nessus	Huawei Local Security Checks	high
134811	EulerOS 2.0 SP5 : pyOpenSSL (EulerOS-SA-2020-1320)	Nessus	Huawei Local Security Checks	high
123651	openSUSE Security Update : python-cryptography / python-pyOpenSSL (openSUSE-2019-1104)	Nessus	SuSE Local Security Checks	high
119577	SUSE SLED12 / SLES12 Security Update : python-cryptography, python-pyOpenSSL (SUSE-SU-2018:4063-1)	Nessus	SuSE Local Security Checks	high
118855	Ubuntu 16.04 LTS : pyOpenSSL vulnerabilities (USN-3813-1)	Nessus	Ubuntu Local Security Checks	high

Detections

Analytics

CVE-2018-1000807

high

Tenable Plugins

high

high

high

high

high

high

high

high

high

high