GHSA-4749-p7rx-8jjj
tlslite remote denial of service vulnerability
Packages
Details
As written in the advisory (Markdown source, shown as plain text).
The tlslite library before 0.4.9 for Python allows remote attackers to trigger a denial of service (runtime exception and process crash).
References
External links from the advisory. They lead to third-party sites.
- https://nvd.nist.gov/vuln/detail/CVE-2015-3220
- https://github.com/trevp/tlslite/commit/aca8d4f898b436ff6754e1a9ab96cae976c8a853
- https://bugzilla.redhat.com/show_bug.cgi?id=1254215
- https://github.com/pypa/advisory-database/tree/main/vulns/tlslite/PYSEC-2017-96.yaml
- https://github.com/trevp/tlslite
- https://groups.google.com/forum/#!topic/tlslite-dev/MoWE7B0A4iU