A flaw was found in OpenKMIP PyKMIP versions before 0.8.0. A Resource Management Errors (similar issue to CVE-2015-5262) vulnerability in PyKMIP server that can result in DOS due to undefined default timeout for all server sockets References: https://github.com/OpenKMIP/PyKMIP/issues/430 Upstream Patch: https://github.com/OpenKMIP/PyKMIP/commit/3a7b880bdf70d295ed8af3a5880bab65fa6b3932
Created python-pykmip tracking bugs for this issue: Affects: fedora-all [bug 1665593]
This flaw affects the python-pykmip's server, which RH would probably not support in a RHOSP production deployment although it might be used for testing. Lowering impact for this reason. https://pykmip.readthedocs.io/en/latest/server.html#