Python Cryptographic Authority pyopenssl version prior to version 17.5.0 contains a CWE-416: Use After Free vulnerability in X509 object handling that can result in Use after free can lead to possible denial of service or remote code execution.. This attack appear to be exploitable via Depends on the calling application and if it retains a reference to the memory.. This vulnerability appears to have been fixed in 17.5.0.

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2019:0085 advisory.

  - pyOpenSSL: Use-after-free in X509 object handling (CVE-2018-1000807)

  - pyOpenSSL: Failure to release memory before removing last reference in PKCS #12 Store (CVE-2018-1000808)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the pyOpenSSL package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - Python Cryptographic Authority pyopenssl version prior to version 17.5.0 contains a CWE-416: Use After     Free vulnerability in X509 object handling that can result in Use after free can lead to possible denial     of service or remote code execution.. This attack appear to be exploitable via Depends on the calling     application and if it retains a reference to the memory.. This vulnerability appears to have been fixed in     17.5.0. (CVE-2018-1000807)

  - Python Cryptographic Authority pyopenssl version Before 17.5.0 contains a CWE - 401 : Failure to Release     Memory Before Removing Last Reference vulnerability in PKCS #12 Store that can result in Denial of service     if memory runs low or is exhausted. This attack appear to be exploitable via Depends upon calling     application, however it could be as simple as initiating a TLS connection. Anything that would cause the     calling application to reload certificates from a PKCS #12 store.. This vulnerability appears to have been     fixed in 17.5.0. (CVE-2018-1000808)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the pyOpenSSL package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - Python Cryptographic Authority pyopenssl version Before     17.5.0 contains a CWE - 401 : Failure to Release Memory     Before Removing Last Reference vulnerability in PKCS     #12 Store that can result in Denial of service if     memory runs low or is exhausted. This attack appear to     be exploitable via Depends upon calling application,     however it could be as simple as initiating a TLS     connection. Anything that would cause the calling     application to reload certificates from a PKCS #12     store.. This vulnerability appears to have been fixed     in 17.5.0.(CVE-2018-1000808)

  - Python Cryptographic Authority pyopenssl version prior     to version 17.5.0 contains a CWE-416: Use After Free     vulnerability in X509 object handling that can result     in Use after free can lead to possible denial of     service or remote code execution.. This attack appear     to be exploitable via Depends on the calling     application and if it retains a reference to the     memory.. This vulnerability appears to have been fixed     in 17.5.0.(CVE-2018-1000807)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the pyOpenSSL package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - Python Cryptographic Authority pyopenssl version Before     17.5.0 contains a CWE - 401 : Failure to Release Memory     Before Removing Last Reference vulnerability in PKCS     #12 Store that can result in Denial of service if     memory runs low or is exhausted. This attack appear to     be exploitable via Depends upon calling application,     however it could be as simple as initiating a TLS     connection. Anything that would cause the calling     application to reload certificates from a PKCS #12     store.. This vulnerability appears to have been fixed     in 17.5.0.(CVE-2018-1000808)

  - Python Cryptographic Authority pyopenssl version prior     to version 17.5.0 contains a CWE-416: Use After Free     vulnerability in X509 object handling that can result     in Use after free can lead to possible denial of     service or remote code execution.. This attack appear     to be exploitable via Depends on the calling     application and if it retains a reference to the     memory.. This vulnerability appears to have been fixed     in 17.5.0.(CVE-2018-1000807)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for python-cryptography, python-pyOpenSSL fixes the following issues :

Security issues fixed :

  - CVE-2018-1000808: A memory leak due to missing reference     checking in PKCS#12 store handling was fixed     (bsc#1111634)

  - CVE-2018-1000807: A use-after-free in X509 object     handling was fixed (bsc#1111635)

This update also contains the following tracked bug fixes :

  - avoid bad interaction with python-cryptography package.
    (bsc#1021578)

  - Avoid regression accessesing non-existing attribute
    _from_raw_x509_ptr in object X509 (bsc#1119077)

  - Add python-setuptools as a requirement. (bsc#1052927)     This update was imported from the SUSE:SLE-12-SP2:Update     update project.

This update for python-cryptography, python-pyOpenSSL fixes the following issues :

Security issues fixed :

CVE-2018-1000808: A memory leak due to missing reference checking in PKCS#12 store handling was fixed (bsc#1111634)

CVE-2018-1000807: A use-after-free in X509 object handling was fixed (bsc#1111635)

avoid bad interaction with python-cryptography package. (bsc#1021578)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

It was discovered that pyOpenSSL incorrectly handled memory when handling X509 objects. A remote attacker could use this issue to cause pyOpenSSL to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2018-1000807)

It was discovered that pyOpenSSL incorrectly handled memory when performing operations on a PKCS #12 store. A remote attacker could possibly use this issue to cause pyOpenSSL to consume resources, resulting in a denial of service. (CVE-2018-1000808).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
194081	RHEL 7 : pyOpenSSL (RHSA-2019:0085)	Nessus	Red Hat Local Security Checks	high
170801	EulerOS Virtualization 3.0.2.2 : pyOpenSSL (EulerOS-SA-2023-1283)	Nessus	Huawei Local Security Checks	high
137948	EulerOS Virtualization 3.0.6.0 : pyOpenSSL (EulerOS-SA-2020-1729)	Nessus	Huawei Local Security Checks	high
134811	EulerOS 2.0 SP5 : pyOpenSSL (EulerOS-SA-2020-1320)	Nessus	Huawei Local Security Checks	high
123651	openSUSE Security Update : python-cryptography / python-pyOpenSSL (openSUSE-2019-1104)	Nessus	SuSE Local Security Checks	high
119577	SUSE SLED12 / SLES12 Security Update : python-cryptography, python-pyOpenSSL (SUSE-SU-2018:4063-1)	Nessus	SuSE Local Security Checks	high
118855	Ubuntu 16.04 LTS : pyOpenSSL vulnerabilities (USN-3813-1)	Nessus	Ubuntu Local Security Checks	high

Detections

Analytics

CVE-2018-1000807

high

Tenable Plugins

high

high

high

high

high

high

high