5.9
Medium
CVE-2019-5010 An exploitable denial-of-service vulnerability exists in the X509 certificate parser of Python.org Python 2.7.11 / 3.6.6
Description
An exploitable denial-of-service vulnerability exists in the X509 certificate parser of Python.org Python 2.7.11 / 3.6.6. A specially crafted X509 certificate can cause a NULL pointer dereference, resulting in a denial of service. An attacker can initiate or accept TLS connections using crafted certificates to trigger this vulnerability.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Python | Versions not published |
Other CVEs of Python
The 7 CVEs of Python →
CVE-2020-10735
A flaw was found in python
6.2
Medium
CVE-2021-4189
A flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in PASV (passive) mode
5.3
Medium
CVE-2021-3733
There's a flaw in urllib's AbstractBasicAuthHandler class
Not rated
CVE-2021-3737
A flaw was found in python
7.5
High