The X509Extension in pyOpenSSL before 0.13.1 does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority.
CVSS Details
- CVSS 3.1 Base Score: 5.9
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade pyopenssl | Jul 30, 2024 | Sep 30, 2013 |
| Suse | — | Upgrade python-pyOpenSSLUpgrade python-pyOpenSSL-doc | Dec 12, 2013 | Sep 30, 2013 |
| Ubuntu | — | Upgrade python3-opensslUpgrade python-openssl | Nov 8, 2024 | Sep 30, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub