{"answers":{"affected":"3 open source packages ship an affected version, including cryptography. It affects 1 product.","exploited":"There is no known exploitation of CVE-2024-0727 in the wild and no public exploit code.","fix":"Upgrade cryptography to 42.0.2 or later.","what":"CVE-2024-0727 is a medium-severity vulnerability in Openssl Openssl, published on 26 Jan 2024. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link."},"fix_prompt":"Check this codebase for CVE-2024-0727 and fix it if it is affected.\n\nWhat it is: CVE-2024-0727 is a medium-severity vulnerability in Openssl Openssl, published on 26 Jan 2024. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.\nExploitation: There is no known exploitation of CVE-2024-0727 in the wild and no public exploit code.\n\nAffected packages and fixed versions:\n- cryptography (PyPI): affected all versions; fixed in 42.0.2\n- cryptography (PyPI): affected all versions; fixed in 42.0.2\n- cryptography (PyPI): affected all versions; fixed in 42.0.2\n\nTask:\n1. Search the dependency manifests and lockfiles (for example package.json, package-lock.json, requirements.txt, poetry.lock, uv.lock, pom.xml, build.gradle, go.mod, Cargo.lock, Gemfile.lock) and any Dockerfiles for the affected packages, including transitive dependencies.\n2. If an affected version is in use, upgrade it to the fixed version for its release line with the project's package manager, so the lockfile is regenerated. Prefer the smallest upgrade that fixes it.\n3. If there is no fix, or the upgrade would break the build, do not guess: explain the risk and the safest workaround instead.\n4. Run the tests and summarise what changed and why.\n5. If nothing in the project is affected, say so and change nothing.\n\nReference: https://insights.sbomify.com/CVE-2024-0727/ (Markdown: https://insights.sbomify.com/CVE-2024-0727/index.md)","id":"CVE-2024-0727","markdown":"https://insights.sbomify.com/CVE-2024-0727/index.md","name":"CVE-2024-0727","record":{"aliases":["ALPINE-CVE-2024-0727","AZL-33935","AZL-33937","AZL-35049","AZL-35086","AZL-37767","AZL-39649","AZL-42721","AZL-42730","AZL-78540","BELL-CVE-2024-0727","CLEANSTART-2026-ID27174","CLSA-2024-1710183809","CLSA-2024-1710786990","DEBIAN-CVE-2024-0727","ECHO-4cb4-2781-3bb1","GHSA-9v9h-cgj8-h64p","JLSEC-2026-247","MINI-fqgr-h3xp-wx2j","OESA-2024-1147","PYSEC-2026-1285","ROOT-APP-PYPI-CVE-2024-0727","SUSE-SU-2024:0549-1","SUSE-SU-2024:0813-1","SUSE-SU-2024:0814-1","SUSE-SU-2024:0815-1","SUSE-SU-2024:0831-1","SUSE-SU-2024:0832-1","SUSE-SU-2024:0833-1","SUSE-SU-2024:0840-1","SUSE-SU-2024:0841-1","SUSE-SU-2024:0842-1","UBUNTU-CVE-2024-0727","openSUSE-SU-2024:13656-1","openSUSE-SU-2024:13662-1","openSUSE-SU-2024:13663-1","openSUSE-SU-2026:11592-1"],"analysis":{"component_type":"library","fix_type":"patch","impacts":["denial_of_service"],"network_reachable":"adjacent_or_local","non_default_config":false,"product_category":"OpenSSL library","requires_auth":"none","summary":"Attackers can cause a denial of service by providing a maliciously formatted PKCS12 file to applications using vulnerable OpenSSL APIs.","user_interaction":"required","vuln_class":"null_dereference"},"analysis_generated_by":"qwen3.8-flash-next","assigner":"openssl","cpe":[{"product":"openssl","vendor":"openssl"}],"cvss":{"score":5.5,"severity":"medium","source":"cisa-adp","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","version":"3.1"},"cwes":[{"id":"CWE-476","name":"NULL Pointer Dereference"}],"description":"Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL\nto crash leading to a potential Denial of Service attack\n\nImpact summary: Applications loading files in the PKCS12 format from untrusted\nsources might terminate abruptly.\n\nA file in PKCS12 format can contain certificates and keys and may come from an\nuntrusted source. The PKCS12 specification allows certain fields to be NULL, but\nOpenSSL does not correctly check for this case. This can lead to a NULL pointer\ndereference that results in OpenSSL crashing. If an application processes PKCS12\nfiles from an untrusted source using the OpenSSL APIs then that application will\nbe vulnerable to this issue.\n\nOpenSSL APIs that are vulnerable to this are: PKCS12_parse(),\nPKCS12_unpack_p7data(), PKCS12_unpack_p7encdata(), PKCS12_unpack_authsafes()\nand PKCS12_newpass().\n\nWe have also fixed a similar issue in SMIME_write_PKCS7(). However since this\nfunction is related to writing data we do not consider it security significant.\n\nThe FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue.","ecosystems":["PyPI","SUSE:Enterprise Storage 7.1","SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","SUSE:Linux Enterprise Micro 5.1","SUSE:Linux Enterprise Micro 5.2","SUSE:Linux Enterprise Micro 5.3","SUSE:Linux Enterprise Micro 5.4","SUSE:Linux Enterprise Micro 5.5","SUSE:Linux Enterprise Module for Basesystem 15 SP5","SUSE:Linux Enterprise Module for Legacy 12","SUSE:Linux Enterprise Module for Legacy 15 SP5","SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE","SUSE:Linux Enterprise Server 12 SP5","SUSE:Linux Enterprise Server 15 SP2-LTSS","SUSE:Linux Enterprise Server 15 SP3-LTSS","SUSE:Linux Enterprise Server 15 SP4-LTSS","SUSE:Linux Enterprise Server for SAP Applications 12 SP5","SUSE:Linux Enterprise Server for SAP Applications 15 SP2","SUSE:Linux Enterprise Server for SAP Applications 15 SP3","SUSE:Linux Enterprise Server for SAP Applications 15 SP4","SUSE:Linux Enterprise Software Development Kit 12 SP5","SUSE:Manager Proxy 4.3","SUSE:Manager Server 4.3","openSUSE:Leap 15.5","openSUSE:Leap Micro 5.3","openSUSE:Leap Micro 5.4","openSUSE:Tumbleweed"],"exploits":{"exploitdb":0,"first_seen":null,"github_poc":0,"max_poc_stars":null,"metasploit":0,"nuclei":0,"refs":[],"tier":"none_known"},"has_fix":true,"headline":"PKCS12 Decoding crashes","id":"CVE-2024-0727","indexable":true,"kev":null,"kind":"cve","links":{"ecosystem":"PyPI","product":"openssl:openssl","products":["openssl:openssl"],"type":"null_dereference","year":"2024"},"n_packages":53,"n_references":6,"next":{"headline":"ForU CMS channel.php file inclusion","id":"CVE-2024-0728"},"packages":[{"ecosystem":"PyPI","fixed":["42.0.2"],"introduced":["0"],"last_affected":[],"package":"cryptography","purl":null,"source":"GHSA-9v9h-cgj8-h64p"},{"ecosystem":"PyPI","fixed":["42.0.2"],"introduced":["0"],"last_affected":[],"package":"cryptography","purl":"pkg:pypi/cryptography","source":"GHSA-9v9h-cgj8-h64p"},{"ecosystem":"PyPI","fixed":["42.0.2"],"introduced":["0"],"last_affected":[],"package":"cryptography","purl":"pkg:pypi/cryptography","source":"PYSEC-2026-1285"},{"ecosystem":"SUSE:Enterprise Storage 7.1","fixed":["1.0.2p-150000.3.91.1"],"introduced":["0"],"last_affected":[],"package":"openssl-1_0_0","purl":"pkg:rpm/suse/openssl-1_0_0\u0026distro=SUSE%20Enterprise%20Storage%207.1","source":"SUSE-SU-2024:0831-1"},{"ecosystem":"SUSE:Enterprise Storage 7.1","fixed":["1.1.1d-150200.11.85.1"],"introduced":["0"],"last_affected":[],"package":"openssl-1_1","purl":"pkg:rpm/suse/openssl-1_1\u0026distro=SUSE%20Enterprise%20Storage%207.1","source":"SUSE-SU-2024:0832-1"},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","fixed":["1.1.1d-150200.11.85.1"],"introduced":["0"],"last_affected":[],"package":"openssl-1_1","purl":"pkg:rpm/suse/openssl-1_1\u0026distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSS","source":"SUSE-SU-2024:0832-1"},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","fixed":["1.0.2p-150000.3.91.1"],"introduced":["0"],"last_affected":[],"package":"openssl-1_0_0","purl":"pkg:rpm/suse/openssl-1_0_0\u0026distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS","source":"SUSE-SU-2024:0831-1"},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","fixed":["1.1.1d-150200.11.85.1"],"introduced":["0"],"last_affected":[],"package":"openssl-1_1","purl":"pkg:rpm/suse/openssl-1_1\u0026distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS","source":"SUSE-SU-2024:0832-1"},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","fixed":["1.0.2p-150000.3.91.1"],"introduced":["0"],"last_affected":[],"package":"openssl-1_0_0","purl":"pkg:rpm/suse/openssl-1_0_0\u0026distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-ESPOS","source":"SUSE-SU-2024:0831-1"},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","fixed":["1.1.1l-150400.7.63.1"],"introduced":["0"],"last_affected":[],"package":"openssl-1_1","purl":"pkg:rpm/suse/openssl-1_1\u0026distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-ESPOS","source":"SUSE-SU-2024:0833-1"},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","fixed":["1.0.2p-150000.3.91.1"],"introduced":["0"],"last_affected":[],"package":"openssl-1_0_0","purl":"pkg:rpm/suse/openssl-1_0_0\u0026distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-LTSS","source":"SUSE-SU-2024:0831-1"},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","fixed":["1.1.1l-150400.7.63.1"],"introduced":["0"],"last_affected":[],"package":"openssl-1_1","purl":"pkg:rpm/suse/openssl-1_1\u0026distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-LTSS","source":"SUSE-SU-2024:0833-1"},{"ecosystem":"SUSE:Linux Enterprise Micro 5.1","fixed":["1.1.1d-150200.11.85.1"],"introduced":["0"],"last_affected":[],"package":"openssl-1_1","purl":"pkg:rpm/suse/openssl-1_1\u0026distro=SUSE%20Linux%20Enterprise%20Micro%205.1","source":"SUSE-SU-2024:0832-1"},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","fixed":["1.1.1d-150200.11.85.1"],"introduced":["0"],"last_affected":[],"package":"openssl-1_1","purl":"pkg:rpm/suse/openssl-1_1\u0026distro=SUSE%20Linux%20Enterprise%20Micro%205.2","source":"SUSE-SU-2024:0832-1"},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","fixed":["1.1.1l-150400.7.63.1"],"introduced":["0"],"last_affected":[],"package":"openssl-1_1","purl":"pkg:rpm/suse/openssl-1_1\u0026distro=SUSE%20Linux%20Enterprise%20Micro%205.3","source":"SUSE-SU-2024:0833-1"},{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","fixed":["1.1.1l-150400.7.63.1"],"introduced":["0"],"last_affected":[],"package":"openssl-1_1","purl":"pkg:rpm/suse/openssl-1_1\u0026distro=SUSE%20Linux%20Enterprise%20Micro%205.4","source":"SUSE-SU-2024:0833-1"},{"ecosystem":"SUSE:Linux Enterprise Micro 5.5","fixed":["1.1.1l-150500.17.25.1"],"introduced":["0"],"last_affected":[],"package":"openssl-1_1","purl":"pkg:rpm/suse/openssl-1_1\u0026distro=SUSE%20Linux%20Enterprise%20Micro%205.5","source":"SUSE-SU-2024:0549-1"},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","fixed":["1.1.1l-150500.17.25.1"],"introduced":["0"],"last_affected":[],"package":"openssl-1_1","purl":"pkg:rpm/suse/openssl-1_1\u0026distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP5","source":"SUSE-SU-2024:0549-1"},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","fixed":["3.0.8-150500.5.27.1"],"introduced":["0"],"last_affected":[],"package":"openssl-3","purl":"pkg:rpm/suse/openssl-3\u0026distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP5","source":"SUSE-SU-2024:0815-1"},{"ecosystem":"SUSE:Linux Enterprise Module for Legacy 12","fixed":["0.9.8j-106.64.1"],"introduced":["0"],"last_affected":[],"package":"compat-openssl098","purl":"pkg:rpm/suse/compat-openssl098\u0026distro=SUSE%20Linux%20Enterprise%20Module%20for%20Legacy%2012","source":"SUSE-SU-2024:0840-1"},{"ecosystem":"SUSE:Linux Enterprise Module for Legacy 15 SP5","fixed":["1.0.2p-150000.3.91.1"],"introduced":["0"],"last_affected":[],"package":"openssl-1_0_0","purl":"pkg:rpm/suse/openssl-1_0_0\u0026distro=SUSE%20Linux%20Enterprise%20Module%20for%20Legacy%2015%20SP5","source":"SUSE-SU-2024:0831-1"},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE","fixed":["0.9.8j-0.106.83.1"],"introduced":["0"],"last_affected":[],"package":"openssl","purl":"pkg:rpm/suse/openssl\u0026distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4%20LTSS%20EXTREME%20CORE","source":"SUSE-SU-2024:0842-1"},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE","fixed":["1.0.1g-0.58.79.1"],"introduced":["0"],"last_affected":[],"package":"openssl1","purl":"pkg:rpm/suse/openssl1\u0026distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4%20LTSS%20EXTREME%20CORE","source":"SUSE-SU-2024:0841-1"},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","fixed":["1.0.2p-3.90.1"],"introduced":["0"],"last_affected":[],"package":"openssl-1_0_0","purl":"pkg:rpm/suse/openssl-1_0_0\u0026distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5","source":"SUSE-SU-2024:0814-1"},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","fixed":["1.1.1d-2.104.1"],"introduced":["0"],"last_affected":[],"package":"openssl-1_1","purl":"pkg:rpm/suse/openssl-1_1\u0026distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5","source":"SUSE-SU-2024:0813-1"},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","fixed":["1.0.2p-150000.3.91.1"],"introduced":["0"],"last_affected":[],"package":"openssl-1_0_0","purl":"pkg:rpm/suse/openssl-1_0_0\u0026distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS","source":"SUSE-SU-2024:0831-1"},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","fixed":["1.1.1d-150200.11.85.1"],"introduced":["0"],"last_affected":[],"package":"openssl-1_1","purl":"pkg:rpm/suse/openssl-1_1\u0026distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS","source":"SUSE-SU-2024:0832-1"},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","fixed":["1.0.2p-150000.3.91.1"],"introduced":["0"],"last_affected":[],"package":"openssl-1_0_0","purl":"pkg:rpm/suse/openssl-1_0_0\u0026distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS","source":"SUSE-SU-2024:0831-1"},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","fixed":["1.1.1d-150200.11.85.1"],"introduced":["0"],"last_affected":[],"package":"openssl-1_1","purl":"pkg:rpm/suse/openssl-1_1\u0026distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS","source":"SUSE-SU-2024:0832-1"},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","fixed":["1.0.2p-150000.3.91.1"],"introduced":["0"],"last_affected":[],"package":"openssl-1_0_0","purl":"pkg:rpm/suse/openssl-1_0_0\u0026distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP4-LTSS","source":"SUSE-SU-2024:0831-1"},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","fixed":["1.1.1l-150400.7.63.1"],"introduced":["0"],"last_affected":[],"package":"openssl-1_1","purl":"pkg:rpm/suse/openssl-1_1\u0026distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP4-LTSS","source":"SUSE-SU-2024:0833-1"},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","fixed":["0.9.8j-106.64.1"],"introduced":["0"],"last_affected":[],"package":"compat-openssl098","purl":"pkg:rpm/suse/compat-openssl098\u0026distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5","source":"SUSE-SU-2024:0840-1"},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","fixed":["1.0.2p-3.90.1"],"introduced":["0"],"last_affected":[],"package":"openssl-1_0_0","purl":"pkg:rpm/suse/openssl-1_0_0\u0026distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5","source":"SUSE-SU-2024:0814-1"},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","fixed":["1.1.1d-2.104.1"],"introduced":["0"],"last_affected":[],"package":"openssl-1_1","purl":"pkg:rpm/suse/openssl-1_1\u0026distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5","source":"SUSE-SU-2024:0813-1"},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","fixed":["1.0.2p-150000.3.91.1"],"introduced":["0"],"last_affected":[],"package":"openssl-1_0_0","purl":"pkg:rpm/suse/openssl-1_0_0\u0026distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2","source":"SUSE-SU-2024:0831-1"},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","fixed":["1.1.1d-150200.11.85.1"],"introduced":["0"],"last_affected":[],"package":"openssl-1_1","purl":"pkg:rpm/suse/openssl-1_1\u0026distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2","source":"SUSE-SU-2024:0832-1"},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","fixed":["1.0.2p-150000.3.91.1"],"introduced":["0"],"last_affected":[],"package":"openssl-1_0_0","purl":"pkg:rpm/suse/openssl-1_0_0\u0026distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3","source":"SUSE-SU-2024:0831-1"},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","fixed":["1.1.1d-150200.11.85.1"],"introduced":["0"],"last_affected":[],"package":"openssl-1_1","purl":"pkg:rpm/suse/openssl-1_1\u0026distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3","source":"SUSE-SU-2024:0832-1"},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","fixed":["1.0.2p-150000.3.91.1"],"introduced":["0"],"last_affected":[],"package":"openssl-1_0_0","purl":"pkg:rpm/suse/openssl-1_0_0\u0026distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP4","source":"SUSE-SU-2024:0831-1"},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","fixed":["1.1.1l-150400.7.63.1"],"introduced":["0"],"last_affected":[],"package":"openssl-1_1","purl":"pkg:rpm/suse/openssl-1_1\u0026distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP4","source":"SUSE-SU-2024:0833-1"}],"prev":{"headline":"Project Worlds Student Project Allocation System Admin Login Module admin_login.php cross site scripting","id":"CVE-2024-0726"},"products":["OpenSSL"],"published":"2024-01-26","related":[{"cvss_score":10,"headline":"Null dereference in n/a","id":"CVE-2009-3245","kev_date_added":null,"published":"2010-03-05"},{"cvss_score":10,"headline":"Memory corruption in n/a","id":"CVE-2006-3738","kev_date_added":null,"published":"2006-09-28"},{"cvss_score":9.8,"headline":"Untrusted Sender DN Used as Format String in CMP Response Validation","id":"CVE-2026-63073","kev_date_added":null,"published":"2026-08-25"},{"cvss_score":9.8,"headline":"Use after free in n/a","id":"CVE-2016-6309","kev_date_added":null,"published":"2016-09-26"},{"cvss_score":9.8,"headline":"Integer overflow in n/a","id":"CVE-2016-0799","kev_date_added":null,"published":"2016-03-03"},{"cvss_score":9.8,"headline":"Memory corruption in n/a","id":"CVE-2016-2842","kev_date_added":null,"published":"2016-03-03"},{"cvss_score":9.8,"headline":"Memory corruption in n/a","id":"CVE-2003-0545","kev_date_added":null,"published":"2003-10-01"}],"sources":[{"class":"attribution","licence":"CVE Terms of Use (MITRE)","name":"CVE List","prefix":"CVE"},{"class":"attribution","licence":"CC BY 4.0","name":"GitHub Advisory Database","prefix":"GHSA"},{"class":"attribution","licence":"CC BY 4.0","name":"PyPA Advisory Database","prefix":"PYSEC"},{"class":"attribution","licence":"CC BY 4.0","name":"SUSE","prefix":"SUSE"},{"class":"attribution","licence":"US public information, NVD API terms","name":"NVD"},{"class":"attribution","licence":"CWE Terms of Use","name":"CWE (MITRE)"},{"class":"attribution","licence":"FIRST CVSS licence","name":"CVSS (FIRST)"}],"ssvc":{"automatable":"no","exploitation":"none","technical_impact":"partial"},"state":"PUBLISHED","updated":"2026-10-15","vendors":["OpenSSL"]},"summary":"Attackers can cause a denial of service by providing a maliciously formatted PKCS12 file to applications using vulnerable OpenSSL APIs.","url":"https://insights.sbomify.com/CVE-2024-0727/"}