NetSight
IP …
high7.5

CVE-2019-5010

An exploitable denial-of-service vulnerability exists in the X509 certificate parser of Python.org Python 2.7.11 / 3.6.6.

Impact

An exploitable denial-of-service vulnerability exists in the X509 certificate parser of Python.org Python 2.7.11 / 3.6.6. A specially crafted X509 certificate can cause a NULL pointer dereference, resulting in a denial of service. An attacker can initiate or accept TLS connections using crafted certificates to trigger this vulnerability.

Affected products

VendorProductAffected versions
PythonPython
from 2.7.0 before 2.7.16
from 3.4.0 before 3.4.10
from 3.5.0 before 3.5.7
from 3.6.0 before 3.6.9
from 3.7.0 before 3.7.3
OpensuseLeap
Version 15.1
DebianDebian Linux
Version 9.0
RedhatEnterprise Linux
Version 8.0
RedhatEnterprise Linux Eus
Versions 8.1, 8.2, 8.4, 8.6
RedhatEnterprise Linux Server Aus
Versions 8.2, 8.4, 8.6
RedhatEnterprise Linux Server Tus
Versions 8.2, 8.4, 8.6

Weakness classification

CWE-476

References