Patchwire CVEs, their patch status, and feeds to follow them

CVE-2018-1000518

Fixed in a distro release EPSS 2%

aaugustin websockets version 4 contains a CWE-409: Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Servers and clients, unless configured with compression=None that can result in Denial of Service by memory exhaustion. This attack appear to be exploitable via Sending a specially crafted frame on an established connection. This vulnerability appears to have been fixed in 5.

Published 2018-06-26 · CVE record · OSV

Products: websockets_project websockets

Fixed upstream

EcosystemPackageFixed in
PyPIwebsockets5.0

Distro releases

ReleasePackageFixed in
SUSE Enterprise Storage 7python-Automat0.6.0-150000.3.4.1
SUSE Enterprise Storage 7python-constantly15.1.0-150000.3.4.1
SUSE Enterprise Storage 7python-hyperlink17.2.1-150000.3.4.1
SUSE Enterprise Storage 7python-incremental17.5.0-150000.3.4.1
SUSE Enterprise Storage 7python-psutil5.9.1-150100.6.6.3
SUSE Enterprise Storage 7python-requests2.25.1-150100.6.13.3
SUSE Enterprise Storage 7python-websocket-client1.3.2-150100.6.7.3
SUSE Enterprise Storage 7python-zope.interface4.4.2-150000.3.4.1
SUSE Enterprise Storage 7.1python-Automat0.6.0-150000.3.4.1
SUSE Enterprise Storage 7.1python-constantly15.1.0-150000.3.4.1
SUSE Enterprise Storage 7.1python-hyperlink17.2.1-150000.3.4.1
SUSE Enterprise Storage 7.1python-incremental17.5.0-150000.3.4.1
SUSE Enterprise Storage 7.1python-websocket-client1.3.2-150100.6.7.3
SUSE Enterprise Storage 7.1python-zope.interface4.4.2-150000.3.4.1
SUSE Linux Enterprise High Performance Computing 15 SP1-LTSSprotobuf3.9.2-150100.8.3.3
SUSE Linux Enterprise High Performance Computing 15 SP1-LTSSpython-cryptography3.3.2-150100.7.15.3
SUSE Linux Enterprise High Performance Computing 15 SP1-LTSSpython-psutil5.9.1-150100.6.6.3
SUSE Linux Enterprise High Performance Computing 15 SP1-LTSSpython-requests2.25.1-150100.6.13.3
SUSE Linux Enterprise High Performance Computing 15 SP1-LTSSpython-websocket-client1.3.2-150100.6.7.3
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSSpython-Automat0.6.0-150000.3.4.1
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSSpython-constantly15.1.0-150000.3.4.1
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSSpython-hyperlink17.2.1-150000.3.4.1
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSSpython-incremental17.5.0-150000.3.4.1
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSSpython-psutil5.9.1-150100.6.6.3
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSSpython-requests2.25.1-150100.6.13.3
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSSpython-websocket-client1.3.2-150100.6.7.3
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSSpython-zope.interface4.4.2-150000.3.4.1
SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOSpython-Automat0.6.0-150000.3.4.1
SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOSpython-constantly15.1.0-150000.3.4.1
SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOSpython-hyperlink17.2.1-150000.3.4.1
SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOSpython-incremental17.5.0-150000.3.4.1
SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOSpython-websocket-client1.3.2-150100.6.7.3
SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOSpython-zope.interface4.4.2-150000.3.4.1
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSSpython-Automat0.6.0-150000.3.4.1
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSSpython-constantly15.1.0-150000.3.4.1
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSSpython-hyperlink17.2.1-150000.3.4.1
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSSpython-incremental17.5.0-150000.3.4.1
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSSpython-websocket-client1.3.2-150100.6.7.3
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSSpython-zope.interface4.4.2-150000.3.4.1
SUSE Linux Enterprise Installer Updates 15 SP1protobuf3.9.2-150100.8.3.3
SUSE Linux Enterprise Module for Basesystem 15 SP4python-websocket-client1.3.2-150100.6.7.3
SUSE Linux Enterprise Module for Basesystem 15 SP5python-websocket-client1.3.2-150100.6.7.3
SUSE Linux Enterprise Module for Package Hub 15 SP5python-humanfriendly10.0-150100.6.3.3
SUSE Linux Enterprise Module for Public Cloud 15 SP1azure-cli-core2.17.1-150100.6.18.1
SUSE Linux Enterprise Module for Public Cloud 15 SP1grpc1.25.0-150100.3.3.3
SUSE Linux Enterprise Module for Public Cloud 15 SP1protobuf3.9.2-150100.8.3.3
SUSE Linux Enterprise Module for Public Cloud 15 SP1python-Deprecated1.2.13-150100.3.3.3
SUSE Linux Enterprise Module for Public Cloud 15 SP1python-PyGithub1.43.5-150100.3.3.3
SUSE Linux Enterprise Module for Public Cloud 15 SP1python-Twisted17.9.0-150000.3.8.1
SUSE Linux Enterprise Module for Public Cloud 15 SP1python-aiocontextvars0.2.2-150100.3.3.3
SUSE Linux Enterprise Module for Public Cloud 15 SP1python-avro1.11.0-150100.3.3.3
SUSE Linux Enterprise Module for Public Cloud 15 SP1python-cryptography3.3.2-150100.7.15.3
SUSE Linux Enterprise Module for Public Cloud 15 SP1python-cryptography-vectors3.3.2-150100.3.11.3
SUSE Linux Enterprise Module for Public Cloud 15 SP1python-google-api-core1.14.2-150100.3.3.3
SUSE Linux Enterprise Module for Public Cloud 15 SP1python-googleapis-common-protos1.6.0-150100.3.3.3
SUSE Linux Enterprise Module for Public Cloud 15 SP1python-grpcio-gcp0.2.2-150100.3.3.3
SUSE Linux Enterprise Module for Public Cloud 15 SP1python-humanfriendly10.0-150100.6.3.3
SUSE Linux Enterprise Module for Public Cloud 15 SP1python-jsondiff1.3.0-150100.3.6.3
SUSE Linux Enterprise Module for Public Cloud 15 SP1python-knack0.9.0-150100.3.7.3
SUSE Linux Enterprise Module for Public Cloud 15 SP1python-opencensus0.8.0-150100.3.3.3
SUSE Linux Enterprise Module for Public Cloud 15 SP1python-opencensus-context0.1.2-150100.3.3.3
SUSE Linux Enterprise Module for Public Cloud 15 SP1python-opencensus-ext-threading0.1.2-150100.3.3.3
SUSE Linux Enterprise Module for Public Cloud 15 SP1python-opentelemetry-api1.5.0-150100.3.3.3
SUSE Linux Enterprise Module for Public Cloud 15 SP1python-psutil5.9.1-150100.6.6.3
SUSE Linux Enterprise Module for Public Cloud 15 SP1python-pytest3.10.1-150000.7.5.1
SUSE Linux Enterprise Module for Public Cloud 15 SP1python-pytest-asyncio0.8.0-150100.3.3.3
SUSE Linux Enterprise Module for Public Cloud 15 SP1python-requests2.25.1-150100.6.13.3
SUSE Linux Enterprise Module for Public Cloud 15 SP1python-websocket-client1.3.2-150100.6.7.3
SUSE Linux Enterprise Module for Public Cloud 15 SP1python-websockets9.1-150100.3.3.3
SUSE Linux Enterprise Module for Public Cloud 15 SP1python-zope.interface4.4.2-150000.3.4.1
SUSE Linux Enterprise Module for Public Cloud 15 SP2azure-cli-core2.17.1-150100.6.18.1
SUSE Linux Enterprise Module for Public Cloud 15 SP2python-Deprecated1.2.13-150100.3.3.3
SUSE Linux Enterprise Module for Public Cloud 15 SP2python-PyGithub1.43.5-150100.3.3.3
SUSE Linux Enterprise Module for Public Cloud 15 SP2python-aiocontextvars0.2.2-150100.3.3.3
SUSE Linux Enterprise Module for Public Cloud 15 SP2python-avro1.11.0-150100.3.3.3
SUSE Linux Enterprise Module for Public Cloud 15 SP2python-humanfriendly10.0-150100.6.3.3
SUSE Linux Enterprise Module for Public Cloud 15 SP2python-jsondiff1.3.0-150100.3.6.3
SUSE Linux Enterprise Module for Public Cloud 15 SP2python-knack0.9.0-150100.3.7.3
SUSE Linux Enterprise Module for Public Cloud 15 SP2python-opencensus0.8.0-150100.3.3.3
SUSE Linux Enterprise Module for Public Cloud 15 SP2python-opencensus-context0.1.2-150100.3.3.3
SUSE Linux Enterprise Module for Public Cloud 15 SP2python-opencensus-ext-threading0.1.2-150100.3.3.3
SUSE Linux Enterprise Module for Public Cloud 15 SP2python-opentelemetry-api1.5.0-150100.3.3.3
SUSE Linux Enterprise Module for Public Cloud 15 SP2python-pytest3.10.1-150000.7.5.1
SUSE Linux Enterprise Module for Public Cloud 15 SP2python-pytest-asyncio0.8.0-150100.3.3.3
SUSE Linux Enterprise Module for Public Cloud 15 SP2python-websockets9.1-150100.3.3.3
SUSE Linux Enterprise Module for Public Cloud 15 SP3azure-cli-core2.17.1-150100.6.18.1
SUSE Linux Enterprise Module for Public Cloud 15 SP3python-Deprecated1.2.13-150100.3.3.3
SUSE Linux Enterprise Module for Public Cloud 15 SP3python-PyGithub1.43.5-150100.3.3.3
SUSE Linux Enterprise Module for Public Cloud 15 SP3python-aiocontextvars0.2.2-150100.3.3.3
SUSE Linux Enterprise Module for Public Cloud 15 SP3python-avro1.11.0-150100.3.3.3
SUSE Linux Enterprise Module for Public Cloud 15 SP3python-humanfriendly10.0-150100.6.3.3
SUSE Linux Enterprise Module for Public Cloud 15 SP3python-jsondiff1.3.0-150100.3.6.3
SUSE Linux Enterprise Module for Public Cloud 15 SP3python-knack0.9.0-150100.3.7.3
SUSE Linux Enterprise Module for Public Cloud 15 SP3python-opencensus0.8.0-150100.3.3.3
SUSE Linux Enterprise Module for Public Cloud 15 SP3python-opencensus-context0.1.2-150100.3.3.3
SUSE Linux Enterprise Module for Public Cloud 15 SP3python-opencensus-ext-threading0.1.2-150100.3.3.3
SUSE Linux Enterprise Module for Public Cloud 15 SP3python-opentelemetry-api1.5.0-150100.3.3.3
SUSE Linux Enterprise Module for Public Cloud 15 SP3python-websockets9.1-150100.3.3.3
SUSE Linux Enterprise Module for Public Cloud 15 SP4azure-cli-core2.17.1-150100.6.18.1
SUSE Linux Enterprise Module for Public Cloud 15 SP4python-Deprecated1.2.13-150100.3.3.3
SUSE Linux Enterprise Module for Public Cloud 15 SP4python-PyGithub1.43.5-150100.3.3.3
SUSE Linux Enterprise Module for Public Cloud 15 SP4python-aiocontextvars0.2.2-150100.3.3.3
SUSE Linux Enterprise Module for Public Cloud 15 SP4python-avro1.11.0-150100.3.3.3
SUSE Linux Enterprise Module for Public Cloud 15 SP4python-cryptography-vectors3.3.2-150100.3.11.3
SUSE Linux Enterprise Module for Public Cloud 15 SP4python-humanfriendly10.0-150100.6.3.3
SUSE Linux Enterprise Module for Public Cloud 15 SP4python-jsondiff1.3.0-150100.3.6.3
SUSE Linux Enterprise Module for Public Cloud 15 SP4python-knack0.9.0-150100.3.7.3
SUSE Linux Enterprise Module for Public Cloud 15 SP4python-opencensus0.8.0-150100.3.3.3
SUSE Linux Enterprise Module for Public Cloud 15 SP4python-opencensus-context0.1.2-150100.3.3.3
SUSE Linux Enterprise Module for Public Cloud 15 SP4python-opencensus-ext-threading0.1.2-150100.3.3.3
SUSE Linux Enterprise Module for Public Cloud 15 SP4python-opentelemetry-api1.5.0-150100.3.3.3
SUSE Linux Enterprise Module for Public Cloud 15 SP4python-websockets9.1-150100.3.3.3
SUSE Linux Enterprise Module for Public Cloud 15 SP5azure-cli-core2.17.1-150100.6.18.1
SUSE Linux Enterprise Module for Public Cloud 15 SP5python-humanfriendly10.0-150100.6.3.3
SUSE Linux Enterprise Module for Public Cloud 15 SP5python-jsondiff1.3.0-150100.3.6.3
SUSE Linux Enterprise Module for Public Cloud 15 SP5python-knack0.9.0-150100.3.7.3
SUSE Linux Enterprise Module for Server Applications 15 SP4python-constantly15.1.0-150000.3.4.1
SUSE Linux Enterprise Module for Server Applications 15 SP4python-hyperlink17.2.1-150000.3.4.1
SUSE Linux Enterprise Module for Server Applications 15 SP4python-zope.interface4.4.2-150000.3.4.1
SUSE Linux Enterprise Module for Server Applications 15 SP5python-constantly15.1.0-150000.3.4.1
SUSE Linux Enterprise Module for Server Applications 15 SP5python-hyperlink17.2.1-150000.3.4.1
SUSE Linux Enterprise Module for Server Applications 15 SP5python-zope.interface4.4.2-150000.3.4.1
SUSE Linux Enterprise Real Time 15 SP3python-Automat0.6.0-150000.3.4.1
SUSE Linux Enterprise Real Time 15 SP3python-constantly15.1.0-150000.3.4.1
SUSE Linux Enterprise Real Time 15 SP3python-hyperlink17.2.1-150000.3.4.1
SUSE Linux Enterprise Real Time 15 SP3python-incremental17.5.0-150000.3.4.1
SUSE Linux Enterprise Real Time 15 SP3python-websocket-client1.3.2-150100.6.7.3
SUSE Linux Enterprise Real Time 15 SP3python-zope.interface4.4.2-150000.3.4.1
SUSE Linux Enterprise Server 15 SP1-LTSSprotobuf3.9.2-150100.8.3.3
SUSE Linux Enterprise Server 15 SP1-LTSSpython-Automat0.6.0-150000.3.4.1
SUSE Linux Enterprise Server 15 SP1-LTSSpython-Twisted17.9.0-150000.3.8.1
SUSE Linux Enterprise Server 15 SP1-LTSSpython-constantly15.1.0-150000.3.4.1
SUSE Linux Enterprise Server 15 SP1-LTSSpython-cryptography3.3.2-150100.7.15.3
SUSE Linux Enterprise Server 15 SP1-LTSSpython-hyperlink17.2.1-150000.3.4.1
SUSE Linux Enterprise Server 15 SP1-LTSSpython-incremental17.5.0-150000.3.4.1
SUSE Linux Enterprise Server 15 SP1-LTSSpython-psutil5.9.1-150100.6.6.3
SUSE Linux Enterprise Server 15 SP1-LTSSpython-requests2.25.1-150100.6.13.3
SUSE Linux Enterprise Server 15 SP1-LTSSpython-websocket-client1.3.2-150100.6.7.3
SUSE Linux Enterprise Server 15 SP1-LTSSpython-zope.interface4.4.2-150000.3.4.1
SUSE Linux Enterprise Server 15 SP2-LTSSpython-Automat0.6.0-150000.3.4.1
SUSE Linux Enterprise Server 15 SP2-LTSSpython-constantly15.1.0-150000.3.4.1
SUSE Linux Enterprise Server 15 SP2-LTSSpython-hyperlink17.2.1-150000.3.4.1
SUSE Linux Enterprise Server 15 SP2-LTSSpython-incremental17.5.0-150000.3.4.1
SUSE Linux Enterprise Server 15 SP2-LTSSpython-psutil5.9.1-150100.6.6.3
SUSE Linux Enterprise Server 15 SP2-LTSSpython-requests2.25.1-150100.6.13.3
SUSE Linux Enterprise Server 15 SP2-LTSSpython-websocket-client1.3.2-150100.6.7.3
SUSE Linux Enterprise Server 15 SP2-LTSSpython-zope.interface4.4.2-150000.3.4.1
SUSE Linux Enterprise Server 15 SP3-LTSSpython-Automat0.6.0-150000.3.4.1
SUSE Linux Enterprise Server 15 SP3-LTSSpython-constantly15.1.0-150000.3.4.1
SUSE Linux Enterprise Server 15 SP3-LTSSpython-hyperlink17.2.1-150000.3.4.1
SUSE Linux Enterprise Server 15 SP3-LTSSpython-incremental17.5.0-150000.3.4.1
SUSE Linux Enterprise Server 15 SP3-LTSSpython-websocket-client1.3.2-150100.6.7.3
SUSE Linux Enterprise Server 15 SP3-LTSSpython-zope.interface4.4.2-150000.3.4.1
SUSE Linux Enterprise Server for SAP Applications 15 SP1protobuf3.9.2-150100.8.3.3
SUSE Linux Enterprise Server for SAP Applications 15 SP1python-Automat0.6.0-150000.3.4.1
SUSE Linux Enterprise Server for SAP Applications 15 SP1python-Twisted17.9.0-150000.3.8.1
SUSE Linux Enterprise Server for SAP Applications 15 SP1python-constantly15.1.0-150000.3.4.1
SUSE Linux Enterprise Server for SAP Applications 15 SP1python-cryptography3.3.2-150100.7.15.3
SUSE Linux Enterprise Server for SAP Applications 15 SP1python-hyperlink17.2.1-150000.3.4.1
SUSE Linux Enterprise Server for SAP Applications 15 SP1python-incremental17.5.0-150000.3.4.1
SUSE Linux Enterprise Server for SAP Applications 15 SP1python-psutil5.9.1-150100.6.6.3
SUSE Linux Enterprise Server for SAP Applications 15 SP1python-requests2.25.1-150100.6.13.3
SUSE Linux Enterprise Server for SAP Applications 15 SP1python-websocket-client1.3.2-150100.6.7.3
SUSE Linux Enterprise Server for SAP Applications 15 SP1python-zope.interface4.4.2-150000.3.4.1
SUSE Linux Enterprise Server for SAP Applications 15 SP2python-Automat0.6.0-150000.3.4.1
SUSE Linux Enterprise Server for SAP Applications 15 SP2python-constantly15.1.0-150000.3.4.1
SUSE Linux Enterprise Server for SAP Applications 15 SP2python-hyperlink17.2.1-150000.3.4.1
SUSE Linux Enterprise Server for SAP Applications 15 SP2python-incremental17.5.0-150000.3.4.1
SUSE Linux Enterprise Server for SAP Applications 15 SP2python-psutil5.9.1-150100.6.6.3
SUSE Linux Enterprise Server for SAP Applications 15 SP2python-requests2.25.1-150100.6.13.3
SUSE Linux Enterprise Server for SAP Applications 15 SP2python-websocket-client1.3.2-150100.6.7.3
SUSE Linux Enterprise Server for SAP Applications 15 SP2python-zope.interface4.4.2-150000.3.4.1
SUSE Linux Enterprise Server for SAP Applications 15 SP3python-Automat0.6.0-150000.3.4.1
SUSE Linux Enterprise Server for SAP Applications 15 SP3python-constantly15.1.0-150000.3.4.1
SUSE Linux Enterprise Server for SAP Applications 15 SP3python-hyperlink17.2.1-150000.3.4.1
SUSE Linux Enterprise Server for SAP Applications 15 SP3python-incremental17.5.0-150000.3.4.1
SUSE Linux Enterprise Server for SAP Applications 15 SP3python-websocket-client1.3.2-150100.6.7.3
SUSE Linux Enterprise Server for SAP Applications 15 SP3python-zope.interface4.4.2-150000.3.4.1
SUSE Manager Proxy 4.2python-Automat0.6.0-150000.3.4.1
SUSE Manager Proxy 4.2python-constantly15.1.0-150000.3.4.1
SUSE Manager Proxy 4.2python-hyperlink17.2.1-150000.3.4.1
SUSE Manager Proxy 4.2python-incremental17.5.0-150000.3.4.1
SUSE Manager Proxy 4.2python-websocket-client1.3.2-150100.6.7.3
SUSE Manager Proxy 4.2python-zope.interface4.4.2-150000.3.4.1
SUSE Manager Server 4.2python-Automat0.6.0-150000.3.4.1
SUSE Manager Server 4.2python-constantly15.1.0-150000.3.4.1
SUSE Manager Server 4.2python-hyperlink17.2.1-150000.3.4.1
SUSE Manager Server 4.2python-incremental17.5.0-150000.3.4.1
SUSE Manager Server 4.2python-websocket-client1.3.2-150100.6.7.3
SUSE Manager Server 4.2python-zope.interface4.4.2-150000.3.4.1
openSUSE Leap 15.4azure-cli-core2.17.1-150100.6.18.1
openSUSE Leap 15.4python-constantly15.1.0-150000.3.4.1
openSUSE Leap 15.4python-humanfriendly10.0-150100.6.3.3
openSUSE Leap 15.4python-hyperlink17.2.1-150000.3.4.1
openSUSE Leap 15.4python-jsondiff1.3.0-150100.3.6.3
openSUSE Leap 15.4python-knack0.9.0-150100.3.7.3
openSUSE Leap 15.4python-websocket-client1.3.2-150100.6.7.3
openSUSE Leap 15.4python-zope.interface4.4.2-150000.3.4.1
openSUSE Tumbleweedpython-websockets9.1-2.1
openSUSE Tumbleweedpython-websockets12.0-2.6
openSUSE Tumbleweedpython-websockets16.0-2.1