Approved changes feed: RSS · Atom
cpe:2.3:a:pyopenssl:pyopenssl:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Pyopenssl (0ba614f6-65f4-5e33-9b8a-c4795d84585c) |
|---|---|
| Product | Pyopenssl (bb814f13-4a47-5dfe-b2cd-2f7bf55c9a71) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/pyopenssl |
purl2cpe | 2026-06-01 10:14:57.753596 |
pkg:deb/ubuntu/pyopenssl |
purl2cpe | 2026-06-01 10:14:57.753598 |
pkg:github/pyca/pyopenssl |
purl2cpe | 2026-06-01 10:14:57.753599 |
pkg:gitlab/kalilinux/pyopenssl |
purl2cpe | 2026-06-01 10:14:57.753601 |
pkg:gitlab/redhat/pyopenssl |
purl2cpe | 2026-06-01 10:14:57.753602 |
pkg:pypi/pyopenssl |
purl2cpe | 2026-06-01 10:14:57.753603 |
pkg:rpm/centos/pyopenssl |
purl2cpe | 2026-06-01 10:14:57.753605 |
pkg:rpm/fedora/pyopenssl |
purl2cpe | 2026-06-01 10:14:57.753606 |
pkg:rpm/opensuse/python-pyopenssl |
purl2cpe | 2026-06-01 10:14:57.753607 |
pkg:sourceforge/pyopenssl |
purl2cpe | 2026-06-01 10:14:57.753609 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-27459 |
vulnerable | 2026-06-08 07:53:22.340674 |
pyOpenSSL DTLS cookie callback buffer overflow
pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 22.0.0 and prior to version 26.0.0, if a user provided callback to `set_cookie_generate_callback` returned a cookie value greater than 256 bytes, pyOpenSSL would overflow an OpenSSL provided buffer. Starting in version 26.0.0, cookie values that are too long are now rejected.
Published: 2026-03-17T23:34:28.483Z
Updated: 2026-09-11T12:09:00.415Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-27448 |
vulnerable | 2026-06-08 07:53:22.329413 |
pyOpenSSL allows TLS connection bypass via unhandled callback exception in set_tlsext_servername_callback
pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 0.14.0 and prior to version 26.0.0, if a user provided callback to `set_tlsext_servername_callback` raised an unhandled exception, this would result in a connection being accepted. If a user was relying on this callback for any security-sensitive behavior, this could allow bypassing it. Starting in version 26.0.0, unhandled exceptions now result in rejecting the connection.
Published: 2026-03-17T23:24:30.661Z
Updated: 2026-03-18T20:18:08.768Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1000807 |
vulnerable | 2026-06-08 05:10:25.980920 |
Details available
Python Cryptographic Authority pyopenssl version prior to version 17.5.0 contains a CWE-416: Use After Free vulnerability in X509 object handling that can result in Use after free can lead to possible denial of service or remote code execution.. This attack appear to be exploitable via Depends on the calling application and if it retains a reference to the memory.. This vulnerability appears to have been fixed in 17.5.0.
Published: 2018-10-08T00:00:00.000Z
Updated: 2024-08-05T12:47:56.674Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.