CVE-2019-5010
Description
An exploitable denial-of-service vulnerability exists in the X509 certificate parser of Python.org Python 2.7.11 / 3.6.6. A specially crafted X509 certificate can cause a NULL pointer dereference, resulting in a denial of service. An attacker can initiate or accept TLS connections using crafted certificates to trigger this vulnerability.
Risk Information
Base Score
7.5
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
6.01
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| SUSE-SU-2019:0243-1(SUSE Linux Enterprise Desktop 12-SP4 ) libpython3_4m1_0-3.4.6-25.21.1.x86_64.rpm | Linux |
| SUSE-SU-2019:0243-1(SUSE Linux Enterprise Desktop 12-SP3 ) libpython3_4m1_0-debuginfo-3.4.6-25.21.1.x86_64.rpm | Linux |
| SUSE-SU-2019:0243-1(SUSE Linux Enterprise Desktop 12-SP4 ) python3-3.4.6-25.21.1.x86_64.rpm | Linux |
| SUSE-SU-2019:0243-1(SUSE Linux Enterprise Desktop 12-SP4 ) python3-base-3.4.6-25.21.1.x86_64.rpm | Linux |
| SUSE-SU-2019:0243-1(SUSE Linux Enterprise Desktop 12-SP4 ) python3-base-debuginfo-3.4.6-25.21.1.x86_64.rpm | Linux |
| SUSE-SU-2019:0243-1(SUSE Linux Enterprise Desktop 12-SP4 ) python3-base-debugsource-3.4.6-25.21.1.x86_64.rpm | Linux |
| SUSE-SU-2019:0243-1(SUSE Linux Enterprise Desktop 12-SP4 ) python3-curses-3.4.6-25.21.1.x86_64.rpm | Linux |
| SUSE-SU-2019:0243-1(SUSE Linux Enterprise Desktop 12-SP4 ) python3-curses-debuginfo-3.4.6-25.21.1.x86_64.rpm | Linux |
| SUSE-SU-2019:0243-1(SUSE Linux Enterprise Desktop 12-SP4 ) python3-debuginfo-3.4.6-25.21.1.x86_64.rpm | Linux |
| SUSE-SU-2019:0243-1(SUSE Linux Enterprise Desktop 12-SP4 ) python3-debugsource-3.4.6-25.21.1.x86_64.rpm | Linux |
| SUSE-SU-2019:0482-1(SUSE Linux Enterprise Desktop 12-SP4 ) libpython2_7-1_0-2.7.13-28.21.1.x86_64.rpm | Linux |
| SUSE-SU-2019:0482-1(SUSE Linux Enterprise Desktop 12-SP3 ) libpython2_7-1_0-32bit-2.7.13-28.21.1.x86_64.rpm | Linux |
| SUSE-SU-2019:0482-1(SUSE Linux Enterprise Desktop 12-SP3 ) libpython2_7-1_0-debuginfo-2.7.13-28.21.1.x86_64.rpm | Linux |
| SUSE-SU-2019:0482-1(SUSE Linux Enterprise Desktop 12-SP3 ) libpython2_7-1_0-debuginfo-32bit-2.7.13-28.21.1.x86_64.rpm | Linux |
| SUSE-SU-2019:0482-1(SUSE Linux Enterprise Desktop 12-SP3 ) python-2.7.13-28.21.1.x86_64.rpm | Linux |
| SUSE-SU-2019:0482-1(SUSE Linux Enterprise Desktop 12-SP3 ) python-base-2.7.13-28.21.1.x86_64.rpm | Linux |
| SUSE-SU-2019:0482-1(SUSE Linux Enterprise Desktop 12-SP3 ) python-base-debuginfo-2.7.13-28.21.1.x86_64.rpm | Linux |
| SUSE-SU-2019:0482-1(SUSE Linux Enterprise Desktop 12-SP3 ) python-base-debuginfo-32bit-2.7.13-28.21.1.x86_64.rpm | Linux |
| SUSE-SU-2019:0482-1(SUSE Linux Enterprise Desktop 12-SP3 ) python-base-debugsource-2.7.13-28.21.1.x86_64.rpm | Linux |
| SUSE-SU-2019:0482-1(SUSE Linux Enterprise Desktop 12-SP3 ) python-curses-2.7.13-28.21.1.x86_64.rpm | Linux |
| SUSE-SU-2019:0482-1(SUSE Linux Enterprise Desktop 12-SP3 ) python-curses-debuginfo-2.7.13-28.21.1.x86_64.rpm | Linux |
| SUSE-SU-2019:0482-1(SUSE Linux Enterprise Desktop 12-SP3 ) python-debuginfo-2.7.13-28.21.1.x86_64.rpm | Linux |
| SUSE-SU-2019:0482-1(SUSE Linux Enterprise Desktop 12-SP3 ) python-debugsource-2.7.13-28.21.1.x86_64.rpm | Linux |
| SUSE-SU-2019:0482-1(SUSE Linux Enterprise Desktop 12-SP3 ) python-devel-2.7.13-28.21.1.x86_64.rpm | Linux |
| SUSE-SU-2019:0482-1(SUSE Linux Enterprise Desktop 12-SP3 ) python-tk-2.7.13-28.21.1.x86_64.rpm | Linux |
| SUSE-SU-2019:0482-1(SUSE Linux Enterprise Desktop 12-SP3 ) python-tk-debuginfo-2.7.13-28.21.1.x86_64.rpm | Linux |
| SUSE-SU-2019:0482-1(SUSE Linux Enterprise Desktop 12-SP3 ) python-xml-2.7.13-28.21.1.x86_64.rpm | Linux |
| SUSE-SU-2019:0482-1(SUSE Linux Enterprise Desktop 12-SP3 ) python-xml-debuginfo-2.7.13-28.21.1.x86_64.rpm | Linux |
| An interactive high-level object-oriented language (USN-4127-1) python2.7_2.7.16-2ubuntu0.1_i386.deb | Linux |
| An interactive high-level object-oriented language (USN-4127-1) python2.7_2.7.16-2ubuntu0.1_amd64.deb | Linux |
| An interactive high-level object-oriented language (USN-4127-1) python2.7_2.7.12-1ubuntu0~16.04.8_i386.deb | Linux |
| An interactive high-level object-oriented language (USN-4127-1) python2.7_2.7.12-1ubuntu0~16.04.8_amd64.deb | Linux |
| An interactive high-level object-oriented language (USN-4127-1) python2.7_2.7.15-4ubuntu4~18.04.1_i386.deb | Linux |
| An interactive high-level object-oriented language (USN-4127-1) python2.7_2.7.15-4ubuntu4~18.04.1_amd64.deb | Linux |
| An interactive high-level object-oriented language (USN-4127-1) python3.5_3.5.2-2ubuntu0~16.04.8_i386.deb | Linux |
| An interactive high-level object-oriented language (USN-4127-1) python3.5_3.5.2-2ubuntu0~16.04.8_amd64.deb | Linux |
| An interactive high-level object-oriented language (USN-4127-1) python3.6_3.6.8-1~18.04.2_i386.deb | Linux |
| An interactive high-level object-oriented language (USN-4127-1) python3.6_3.6.8-1~18.04.2_amd64.deb | Linux |
| An interactive high-level object-oriented language (USN-4127-1) python3.7_3.7.3-2ubuntu0.1_i386.deb | Linux |
| An interactive high-level object-oriented language (USN-4127-1) python3.7_3.7.3-2ubuntu0.1_amd64.deb | Linux |
| An interactive high-level object-oriented language (USN-4127-1) python2.7-minimal_2.7.16-2ubuntu0.1_i386.deb | Linux |
| An interactive high-level object-oriented language (USN-4127-1) python2.7-minimal_2.7.16-2ubuntu0.1_amd64.deb | Linux |
| An interactive high-level object-oriented language (USN-4127-1) python2.7-minimal_2.7.12-1ubuntu0~16.04.8_i386.deb | Linux |
| An interactive high-level object-oriented language (USN-4127-1) python2.7-minimal_2.7.12-1ubuntu0~16.04.8_amd64.deb | Linux |
| An interactive high-level object-oriented language (USN-4127-1) python2.7-minimal_2.7.15-4ubuntu4~18.04.1_i386.deb | Linux |
| An interactive high-level object-oriented language (USN-4127-1) python2.7-minimal_2.7.15-4ubuntu4~18.04.1_amd64.deb | Linux |
| An interactive high-level object-oriented language (USN-4127-1) python3.5-minimal_3.5.2-2ubuntu0~16.04.8_i386.deb | Linux |
| An interactive high-level object-oriented language (USN-4127-1) python3.5-minimal_3.5.2-2ubuntu0~16.04.8_amd64.deb | Linux |
| An interactive high-level object-oriented language (USN-4127-1) python3.6-minimal_3.6.8-1~18.04.2_i386.deb | Linux |
| An interactive high-level object-oriented language (USN-4127-1) python3.6-minimal_3.6.8-1~18.04.2_amd64.deb | Linux |
| An interactive high-level object-oriented language (USN-4127-1) python3.7-minimal_3.7.3-2ubuntu0.1_i386.deb | Linux |
| An interactive high-level object-oriented language (USN-4127-1) python3.7-minimal_3.7.3-2ubuntu0.1_amd64.deb | Linux |
| (RHSA-2019:2030) python security and bug fix update python-2.7.5-86.el7.x86_64.rpm | Linux |
| (RHSA-2019:2030) python security and bug fix update python-debug-2.7.5-86.el7.x86_64.rpm | Linux |
| (RHSA-2019:2030) python security and bug fix update python-devel-2.7.5-86.el7.x86_64.rpm | Linux |
| (RHSA-2019:2030) python security and bug fix update python-libs-2.7.5-86.el7.i686.rpm | Linux |
| (RHSA-2019:2030) python security and bug fix update python-libs-2.7.5-86.el7.x86_64.rpm | Linux |
| (RHSA-2019:2030) python security and bug fix update python-test-2.7.5-86.el7.x86_64.rpm | Linux |
| (RHSA-2019:2030) python security and bug fix update python-tools-2.7.5-86.el7.x86_64.rpm | Linux |
| (RHSA-2019:2030) python security and bug fix update tkinter-2.7.5-86.el7.x86_64.rpm | Linux |
| SUSE-SU-2020:0302-1(SUSE Linux Enterprise Server 12-SP5 ) libpython3_6m1_0-3.6.10-4.3.5.x86_64.rpm | Linux |
| SUSE-SU-2020:0302-1(SUSE Linux Enterprise Server 12-SP5 ) libpython3_6m1_0-debuginfo-3.6.10-4.3.5.x86_64.rpm | Linux |
| SUSE-SU-2020:0302-1(SUSE Linux Enterprise Server 12-SP5 ) python36-3.6.10-4.3.5.x86_64.rpm | Linux |
| SUSE-SU-2020:0302-1(SUSE Linux Enterprise Server 12-SP5 ) python36-base-3.6.10-4.3.5.x86_64.rpm | Linux |
| SUSE-SU-2020:0302-1(SUSE Linux Enterprise Server 12-SP5 ) python36-base-debuginfo-3.6.10-4.3.5.x86_64.rpm | Linux |
| SUSE-SU-2020:0302-1(SUSE Linux Enterprise Server 12-SP5 ) python36-base-debugsource-3.6.10-4.3.5.x86_64.rpm | Linux |
| SUSE-SU-2020:0302-1(SUSE Linux Enterprise Server 12-SP5 ) python36-debuginfo-3.6.10-4.3.5.x86_64.rpm | Linux |
| SUSE-SU-2020:0302-1(SUSE Linux Enterprise Server 12-SP5 ) python36-debugsource-3.6.10-4.3.5.x86_64.rpm | Linux |
| SUSE-SU-2020:3563-1(SUSE Linux Enterprise Server 12-SP5) libpython3_6m1_0-3.6.12-4.22.2.x86_64.rpm | Linux |
| SUSE-SU-2020:3563-1(SUSE Linux Enterprise Server 12-SP5) libpython3_6m1_0-debuginfo-3.6.12-4.22.2.x86_64.rpm | Linux |
| SUSE-SU-2020:3563-1(SUSE Linux Enterprise Server 12-SP5) python36-3.6.12-4.22.2.x86_64.rpm | Linux |
| SUSE-SU-2020:3563-1(SUSE Linux Enterprise Server 12-SP5) python36-base-3.6.12-4.22.2.x86_64.rpm | Linux |
| SUSE-SU-2020:3563-1(SUSE Linux Enterprise Server 12-SP5) python36-base-debuginfo-3.6.12-4.22.2.x86_64.rpm | Linux |
| SUSE-SU-2020:3563-1(SUSE Linux Enterprise Server 12-SP5) python36-debuginfo-3.6.12-4.22.2.x86_64.rpm | Linux |
| SUSE-SU-2020:3563-1(SUSE Linux Enterprise Server 12-SP5) python36-debugsource-3.6.12-4.22.2.x86_64.rpm | Linux |
| An interactive high-level object-oriented language (USN-6891-1) python3.10_3.10.12-1~22.04.4_amd64.deb | Linux |
| An interactive high-level object-oriented language (USN-6891-1) python3.10_3.10.12-1~22.04.4_i386.deb | Linux |
| An interactive high-level object-oriented language (USN-6891-1) python3.10-minimal_3.10.12-1~22.04.4_amd64.deb | Linux |
| An interactive high-level object-oriented language (USN-6891-1) python3.10-minimal_3.10.12-1~22.04.4_i386.deb | Linux |
| An interactive high-level object-oriented language (USN-6891-1) python3.11_3.11.6-3ubuntu0.1_amd64.deb | Linux |
| An interactive high-level object-oriented language (USN-6891-1) python3.11_3.11.6-3ubuntu0.1_i386.deb | Linux |
| An interactive high-level object-oriented language (USN-6891-1) python3.11-minimal_3.11.6-3ubuntu0.1_amd64.deb | Linux |
| An interactive high-level object-oriented language (USN-6891-1) python3.11-minimal_3.11.6-3ubuntu0.1_i386.deb | Linux |
| An interactive high-level object-oriented language (USN-6891-1) python3.12_3.12.0-1ubuntu0.1_amd64.deb | Linux |
| An interactive high-level object-oriented language (USN-6891-1) python3.12_3.12.0-1ubuntu0.1_i386.deb | Linux |
| An interactive high-level object-oriented language (USN-6891-1) python3.12-minimal_3.12.0-1ubuntu0.1_amd64.deb | Linux |
| An interactive high-level object-oriented language (USN-6891-1) python3.12-minimal_3.12.0-1ubuntu0.1_i386.deb | Linux |
| An interactive high-level object-oriented language (USN-6891-1) python3.8_3.8.10-0ubuntu1~20.04.10_amd64.deb | Linux |
| An interactive high-level object-oriented language (USN-6891-1) python3.8_3.8.10-0ubuntu1~20.04.10_i386.deb | Linux |
| An interactive high-level object-oriented language (USN-6891-1) python3.8-minimal_3.8.10-0ubuntu1~20.04.10_amd64.deb | Linux |
| An interactive high-level object-oriented language (USN-6891-1) python3.8-minimal_3.8.10-0ubuntu1~20.04.10_i386.deb | Linux |
| NULL Pointer Dereference Vulnerability (CVE-2019-5010) | NCM |
Patch Details
No records foundReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234