CVE:CVE-2018-1000807
CNNVD:CNNVD-201810-249
Python Cryptographic Authority pyopenssl是一款基于Python的OpenSSL库。
Python Cryptographic Authority pyopenssl 17.5.0之前版本中对X509对象的处理方法存在释放后重用漏洞。远程攻击者可利用该漏洞造成拒绝服务或执行代码。
solution:Upgrade pyopenssl pyopenssl to a higher version than 17.5.0,and avoid the version (,17.5.0); Upgrade canonical ubuntu_linux to a higher version than 16.04,and avoid the version 16.04; Upgrade redhat openstack to a higher version than 13,and avoid the version 13; Upgrade redhat enterprise_linux_desktop to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_workstation to a higher version than 7.0,and avoid the version 7.0