5.9
Medium
CVE-2019-5010 An exploitable denial-of-service vulnerability exists in the X509 certificate parser of Python.org Python 2.7.11 / 3.6.6
Description
An exploitable denial-of-service vulnerability exists in the X509 certificate parser of Python.org Python 2.7.11 / 3.6.6. A specially crafted X509 certificate can cause a NULL pointer dereference, resulting in a denial of service. An attacker can initiate or accept TLS connections using crafted certificates to trigger this vulnerability.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Python | Versions not published |
References
- RHSA-2019:3520 access.redhat.com
- RHSA-2019:3725 access.redhat.com
- openSUSE-SU-2020:0086 lists.opensuse.org
- GLSA-202003-26 security.gentoo.org
- [debian-lts-announce] 20200715 [SECURITY] [DLA 2280-1] python3.5 security update lists.debian.org
- [bookkeeper-issues] 20200729 [GitHub] [bookkeeper] padma81 opened a new issue #2387: Security vulnerabilities in the apache/bookkeeper-4.9.2 image lists.apache.org
- [debian-lts-announce] 20200822 [SECURITY] [DLA 2337-1] python2.7 security update lists.debian.org
- talosintelligence.com talosintelligence.com
Timeline
- Published
- Last modified
Other CVEs of Python
The 7 CVEs of Python →
CVE-2020-10735
A flaw was found in python
6.2
Medium
CVE-2021-4189
A flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in PASV (passive) mode
5.3
Medium
CVE-2021-3733
There's a flaw in urllib's AbstractBasicAuthHandler class
Not rated
CVE-2021-3737
A flaw was found in python
7.5
High