Skip to content

SSL module fails to handle NULL bytes inside subjectAltNames general names (CVE-2013-4238) #62909

@tiran

Description

@tiran
BPO 18709
Nosy @warsaw, @birkenfeld, @vstinner, @larryhastings, @tiran, @benjaminp, @merwok, @dstufft, @abn
Files
  • nullbytecert.pem: Malicious certificate
  • CVE-2013-4073_py34.patch: Patch for Python 3.4
  • CVE-2013-4073_py33.patch: Patch for Python 3.3
  • CVE-2013-4073_py27.patch: Patch for Python 2.7
  • CVE-2013-4073_py26.patch
  • CVE-2013-4238-py31.patch: Patch for Python 3.1
  • CVE-2013-4238-py32.patch: Patch for Python 3.2
  • Note: these values reflect the state of the issue at the time it was migrated and might not reflect the current state.

    Show more details

    GitHub fields:

    assignee = 'https://github.com/birkenfeld'
    closed_at = <Date 2014-09-30.12:47:58.447>
    created_at = <Date 2013-08-12.11:32:52.317>
    labels = ['type-security', 'extension-modules', 'release-blocker']
    title = 'SSL module fails to handle NULL bytes inside subjectAltNames general names (CVE-2013-4238)'
    updated_at = <Date 2018-08-14.12:45:53.022>
    user = 'https://github.com/tiran'

    bugs.python.org fields:

    activity = <Date 2018-08-14.12:45:53.022>
    actor = 'christian.heimes'
    assignee = 'georg.brandl'
    closed = True
    closed_date = <Date 2014-09-30.12:47:58.447>
    closer = 'georg.brandl'
    components = ['Extension Modules']
    creation = <Date 2013-08-12.11:32:52.317>
    creator = 'christian.heimes'
    dependencies = []
    files = ['31240', '31241', '31242', '31243', '31309', '31330', '31331']
    hgrepos = []
    issue_num = 18709
    keywords = ['patch']
    message_count = 31.0
    messages = ['194944', '194945', '194958', '194959', '195043', '195056', '195069', '195307', '195347', '195438', '195440', '195992', '196113', '196121', '196122', '196565', '196566', '196776', '196777', '196779', '196999', '197692', '197793', '200343', '200377', '200395', '203168', '214973', '227894', '323510', '323514']
    nosy_count = 13.0
    nosy_names = ['barry', 'georg.brandl', 'vstinner', 'larry', 'christian.heimes', 'benjamin.peterson', 'eric.araujo', 'Arfrever', 'python-dev', 'dstufft', 'abn', 'sYnfo', 'Anuj']
    pr_nums = []
    priority = 'release blocker'
    resolution = 'fixed'
    stage = 'resolved'
    status = 'closed'
    superseder = None
    type = 'security'
    url = 'https://bugs.python.org/issue18709'
    versions = ['Python 3.2']

    Metadata

    Metadata

    Assignees

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions