by Kastro CVE-2026-27459
pyca pyopenssl — pyOpenSSL DTLS cookie callback buffer overflow
Description · from the CVE record
pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 22.0.0 and prior to version 26.0.0, if a user provided callback to `set_cookie_generate_callback` returned a cookie value greater than 256 bytes, pyOpenSSL would overflow an OpenSSL provided buffer. Starting in version 26.0.0, cookie values that are too long are now rejected.
Affected
ProductAffectedFixed inSource
pyopenssl>= 22.0.0, < 26.0.0–CNA
Red Hat Ansible Automation Platform 2.5 for RHEL 8see advisory0:26.0.0-1.el8apredhat-SADP
Red Hat Ansible Automation Platform 2.5 for RHEL 9see advisory0:26.0.0-1.el9apredhat-SADP
Red Hat Ansible Automation Platform 2.6 for RHEL 9see advisory0:4.7.11-2.el9apredhat-SADP
Red Hat Ansible Automation Platform 2.6 for RHEL 9see advisory0:26.0.0-1.el9apredhat-SADP
Red Hat Satellite 6.16 for RHEL 8see advisory0:24.1.0-2.el8pcredhat-SADP
Red Hat Satellite 6.16 for RHEL 9see advisory0:24.1.0-2.el9pcredhat-SADP
Red Hat Satellite 6.17 for RHEL 9see advisory0:25.1.0-0.3.el9pcredhat-SADP
Red Hat Satellite 6.18 for RHEL 9see advisory0:26.0.0-2.el9pcredhat-SADP
RHUI 4 for RHEL 8see advisory0:24.1.0-2.el8uiredhat-SADP
Red Hat Ansible Automation Platform 2.5see advisory1777398315redhat-SADP
Red Hat Ansible Automation Platform 2.5see advisory1777403872redhat-SADP
Scores by source
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
redhat-SADP (CNA)8.1CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
GitHub_M (CNA)7.2CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total