Insecure digital certificates In python2.7
Description
The ssl.match_hostname function in CPython (aka Python) before 2.7.9 and 3.x before 3.3.3 does not properly handle wildcards in hostnames, which might allow man-in-the-middle attackers to spoof servers via a crafted certificate.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 debian 11 | 2.7.9-1 | ||
 rpm rhel7 | - | - | |
rpm rhel7 | - | - |
Aliases
1. 2. 3. 4. 5.