Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

Appearance settings

SSL module fails to handle NULL bytes inside subjectAltNames general names (CVE-2013-4238) #62909

Copy link
Copy link
@tiran

Description

@tiran
Issue body actions
BPO 18709
Nosy @warsaw, @birkenfeld, @vstinner, @larryhastings, @tiran, @benjaminp, @merwok, @dstufft, @abn
Files
  • nullbytecert.pem: Malicious certificate
  • CVE-2013-4073_py34.patch: Patch for Python 3.4
  • CVE-2013-4073_py33.patch: Patch for Python 3.3
  • CVE-2013-4073_py27.patch: Patch for Python 2.7
  • CVE-2013-4073_py26.patch
  • CVE-2013-4238-py31.patch: Patch for Python 3.1
  • CVE-2013-4238-py32.patch: Patch for Python 3.2
  • Note: these values reflect the state of the issue at the time it was migrated and might not reflect the current state.

    Show more details

    GitHub fields:

    assignee = 'https://github.com/birkenfeld'
    closed_at = <Date 2014-09-30.12:47:58.447>
    created_at = <Date 2013-08-12.11:32:52.317>
    labels = ['type-security', 'extension-modules', 'release-blocker']
    title = 'SSL module fails to handle NULL bytes inside subjectAltNames general names (CVE-2013-4238)'
    updated_at = <Date 2018-08-14.12:45:53.022>
    user = 'https://github.com/tiran'

    bugs.python.org fields:

    activity = <Date 2018-08-14.12:45:53.022>
    actor = 'christian.heimes'
    assignee = 'georg.brandl'
    closed = True
    closed_date = <Date 2014-09-30.12:47:58.447>
    closer = 'georg.brandl'
    components = ['Extension Modules']
    creation = <Date 2013-08-12.11:32:52.317>
    creator = 'christian.heimes'
    dependencies = []
    files = ['31240', '31241', '31242', '31243', '31309', '31330', '31331']
    hgrepos = []
    issue_num = 18709
    keywords = ['patch']
    message_count = 31.0
    messages = ['194944', '194945', '194958', '194959', '195043', '195056', '195069', '195307', '195347', '195438', '195440', '195992', '196113', '196121', '196122', '196565', '196566', '196776', '196777', '196779', '196999', '197692', '197793', '200343', '200377', '200395', '203168', '214973', '227894', '323510', '323514']
    nosy_count = 13.0
    nosy_names = ['barry', 'georg.brandl', 'vstinner', 'larry', 'christian.heimes', 'benjamin.peterson', 'eric.araujo', 'Arfrever', 'python-dev', 'dstufft', 'abn', 'sYnfo', 'Anuj']
    pr_nums = []
    priority = 'release blocker'
    resolution = 'fixed'
    stage = 'resolved'
    status = 'closed'
    superseder = None
    type = 'security'
    url = 'https://bugs.python.org/issue18709'
    versions = ['Python 3.2']

    Reactions are currently unavailable

    Metadata

    Metadata

    Assignees

    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions

      Morty Proxy This is a proxified and sanitized view of the page, visit original site.