Maple Labs

CVE search · CVE-2019-5010

CVE-2019-5010

high 7.5

An exploitable denial-of-service vulnerability exists in the X509 certificate parser of Python.org Python 2.7.11 / 3.6.6. A specially crafted X509 certificate can cause a NULL pointer dereference, resulting in a denial of service. An attacker can initiate or accept TLS connections using crafted certificates to trigger this vulnerability.

Open in the NVD CVE.org JSON

Details

Status
Modified
Published
Last changed
Source
talos-cna@cisco.com
Weakness
CWE-476

Severity

VersionScoreVectorSource
CVSS 3.1 high 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H nvd@nist.govPrimary
CVSS 3.0 medium 5.9 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H talos-cna@cisco.comSecondary
CVSS 2.0 medium 5.0 AV:N/AC:L/Au:N/C:N/I:N/A:P nvd@nist.govPrimary

Affected products

Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.

References