Lucene search
UbuntuUSN-1965-1HistorySep 23, 2013 - 12:00 a.m.
pyOpenSSL vulnerability
2013-09-2300:00:00
ubuntu.com
32
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
6 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
52.0%
Releases
- Ubuntu 13.04
- Ubuntu 12.10
- Ubuntu 12.04
- Ubuntu 10.04
Packages
- pyopenssl - Python wrapper around the OpenSSL library
Details
It was discovered that pyOpenSSL did not properly handle certificates with
NULL characters in the Subject Alternative Name field. An attacker could
exploit this to perform a machine-in-the-middle attack to view sensitive
information or alter encrypted communications.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 13.04 | noarch | python-openssl | < 0.13-2ubuntu3.1 | UNKNOWN |
| Ubuntu | 13.04 | noarch | python-openssl-dbg | < 0.13-2ubuntu3.1 | UNKNOWN |
| Ubuntu | 13.04 | noarch | python3-openssl | < 0.13-2ubuntu3.1 | UNKNOWN |
| Ubuntu | 13.04 | noarch | python3-openssl-dbg | < 0.13-2ubuntu3.1 | UNKNOWN |
| Ubuntu | 12.10 | noarch | python-openssl | < 0.13-2ubuntu1.1 | UNKNOWN |
| Ubuntu | 12.10 | noarch | python-openssl-dbg | < 0.13-2ubuntu1.1 | UNKNOWN |
| Ubuntu | 12.10 | noarch | python3-openssl | < 0.13-2ubuntu1.1 | UNKNOWN |
| Ubuntu | 12.10 | noarch | python3-openssl-dbg | < 0.13-2ubuntu1.1 | UNKNOWN |
| Ubuntu | 12.04 | noarch | python-openssl | < 0.12-1ubuntu2.1 | UNKNOWN |
| Ubuntu | 12.04 | noarch | python-openssl-dbg | < 0.12-1ubuntu2.1 | UNKNOWN |
References
Related
debian
debian
[SECURITY] [DSA 2763-1] pyopenssl security update
2013-09-24 16:54:26
[SECURITY] [DSA 2763-1] pyopenssl security update
2013-09-24 16:54:26
veracode
veracode
Hostname Check Bypassing
2017-01-09 05:19:01
openvas
openvas
Debian: Security Advisory (DSA-2763-1)
2013-09-23 00:00:00
Debian Security Advisory DSA 2763-1 (pyopenssl - hostname check bypassing)
2013-09-24 00:00:00
Ubuntu: Security Advisory (USN-1965-1)
2013-09-24 00:00:00
debiancve
debiancve
CVE-2013-4314
2013-09-30 21:55:09
cve
cve
CVE-2013-4314
2013-09-30 21:55:09
nessus
nessus
Debian DSA-2763-1 : pyopenssl - hostname check bypassing
2013-09-25 00:00:00
Mandriva Linux Security Advisory : python-OpenSSL (MDVSA-2013:233)
2013-09-14 00:00:00
openSUSE Security Update : python-pyOpenSSL (openSUSE-SU-2013:1648-1)
2014-06-13 00:00:00
mageia
mageia
Updated python-OpenSSL package fixes security vulnerability
2013-09-14 00:16:05
osv
osv
pyopenssl - hostname check bypassing
2013-09-24 00:00:00
PyOpenSSL Mishandles NUL Byte In Certificate Subject Alternative Name
2022-05-17 04:56:46
PYSEC-2013-31
2013-09-30 21:55:00
cvelist
cvelist
CVE-2013-4314
2013-09-30 21:00:00
f5
f5
K15151 : pyOpenSSL vulnerability CVE-2013-4314
2014-04-11 00:00:00
SOL15151 - pyOpenSSL vulnerability CVE-2013-4314
2014-04-10 00:00:00
ubuntucve
ubuntucve
CVE-2013-4314
2013-09-09 00:00:00
nvd
nvd
CVE-2013-4314
2013-09-30 21:55:09
prion
prion
Design/Logic Flaw
2013-09-30 21:55:00
github
github
PyOpenSSL Mishandles NUL Byte In Certificate Subject Alternative Name
2022-05-17 04:56:46
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
6 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
52.0%
Related for USN-1965-1