Lucene search
Veracode Vulnerability DatabaseVERACODE:3249HistoryJan 09, 2017 - 5:19 a.m.
Hostname Check Bypassing
2017-01-0905:19:01
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
EPSS
0.002
Percentile
51.9%
pyOpenSSL is vulnerable to hostname check bypassing. This is because it does not properly handle hostnames in the certificate that contain null bytes.The string formatting of subjectAltName X509Extension instances incorrectly truncates fields of the name when encountering null bytes, allowing man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority.
Related
debian
debian
[SECURITY] [DSA 2763-1] pyopenssl security update
2013-09-24 16:54:26
[SECURITY] [DSA 2763-1] pyopenssl security update
2013-09-24 16:54:26
openvas
openvas
Debian: Security Advisory (DSA-2763-1)
2013-09-23 00:00:00
Mageia: Security Advisory (MGASA-2013-0277)
2022-01-28 00:00:00
Ubuntu Update for pyopenssl USN-1965-1
2013-09-24 00:00:00
debiancve
debiancve
CVE-2013-4314
2013-09-30 21:55:09
github
github
PyOpenSSL Mishandles NUL Byte In Certificate Subject Alternative Name
2022-05-17 04:56:46
nessus
nessus
Ubuntu 10.04 LTS / 12.04 LTS / 12.10 / 13.04 : pyopenssl vulnerability (USN-1965-1)
2013-09-24 00:00:00
Mandriva Linux Security Advisory : python-OpenSSL (MDVSA-2013:233)
2013-09-14 00:00:00
Debian DSA-2763-1 : pyopenssl - hostname check bypassing
2013-09-25 00:00:00
osv
osv
PyOpenSSL Mishandles NUL Byte In Certificate Subject Alternative Name
2022-05-17 04:56:46
python310-pyOpenSSL-24.1.0-1.2 on GA media
2024-07-12 00:00:00
pyopenssl - hostname check bypassing
2013-09-24 00:00:00
f5
f5
SOL15151 - pyOpenSSL vulnerability CVE-2013-4314
2014-04-10 00:00:00
K15151 : pyOpenSSL vulnerability CVE-2013-4314
2014-04-11 00:00:00
mageia
mageia
Updated python-OpenSSL package fixes security vulnerability
2013-09-14 00:16:05
cvelist
cvelist
CVE-2013-4314
2013-09-30 21:00:00
cve
cve
CVE-2013-4314
2013-09-30 21:55:09
ubuntucve
ubuntucve
CVE-2013-4314
2013-09-09 00:00:00
prion
prion
Design/Logic Flaw
2013-09-30 21:55:00
ubuntu
ubuntu
pyOpenSSL vulnerability
2013-09-23 00:00:00
nvd
nvd
CVE-2013-4314
2013-09-30 21:55:09