CPython 3.9 and earlier doesn't disallow configuring an empty list ("[]") for SSLContext.setnpnprotocols() which is an invalid value for the underlying OpenSSL API. This results in a buffer over-read when NPN is used (see CVE-2024-5535 for OpenSSL). This vulnerability is of low severity due to NPN being not widely used and specifying an empty list likely being uncommon in-practice (typically a protocol name would be configured).
{
"binaries": [
{
"binary_version": "2.7.6-8ubuntu0.6+esm28",
"binary_name": "idle-python2.7"
},
{
"binary_version": "2.7.6-8ubuntu0.6+esm28",
"binary_name": "libpython2.7"
},
{
"binary_version": "2.7.6-8ubuntu0.6+esm28",
"binary_name": "libpython2.7-dev"
},
{
"binary_version": "2.7.6-8ubuntu0.6+esm28",
"binary_name": "libpython2.7-minimal"
},
{
"binary_version": "2.7.6-8ubuntu0.6+esm28",
"binary_name": "libpython2.7-stdlib"
},
{
"binary_version": "2.7.6-8ubuntu0.6+esm28",
"binary_name": "libpython2.7-testsuite"
},
{
"binary_version": "2.7.6-8ubuntu0.6+esm28",
"binary_name": "python2.7"
},
{
"binary_version": "2.7.6-8ubuntu0.6+esm28",
"binary_name": "python2.7-dev"
},
{
"binary_version": "2.7.6-8ubuntu0.6+esm28",
"binary_name": "python2.7-examples"
},
{
"binary_version": "2.7.6-8ubuntu0.6+esm28",
"binary_name": "python2.7-minimal"
}
],
"priority_reason": "Requires unlikely API usage to be vulnerable."
}{
"binaries": [
{
"binary_version": "3.4.3-1ubuntu1~14.04.7+esm16",
"binary_name": "idle-python3.4"
},
{
"binary_version": "3.4.3-1ubuntu1~14.04.7+esm16",
"binary_name": "libpython3.4"
},
{
"binary_version": "3.4.3-1ubuntu1~14.04.7+esm16",
"binary_name": "libpython3.4-dev"
},
{
"binary_version": "3.4.3-1ubuntu1~14.04.7+esm16",
"binary_name": "libpython3.4-minimal"
},
{
"binary_version": "3.4.3-1ubuntu1~14.04.7+esm16",
"binary_name": "libpython3.4-stdlib"
},
{
"binary_version": "3.4.3-1ubuntu1~14.04.7+esm16",
"binary_name": "libpython3.4-testsuite"
},
{
"binary_version": "3.4.3-1ubuntu1~14.04.7+esm16",
"binary_name": "python3.4"
},
{
"binary_version": "3.4.3-1ubuntu1~14.04.7+esm16",
"binary_name": "python3.4-dev"
},
{
"binary_version": "3.4.3-1ubuntu1~14.04.7+esm16",
"binary_name": "python3.4-examples"
},
{
"binary_version": "3.4.3-1ubuntu1~14.04.7+esm16",
"binary_name": "python3.4-minimal"
},
{
"binary_version": "3.4.3-1ubuntu1~14.04.7+esm16",
"binary_name": "python3.4-venv"
}
],
"priority_reason": "Requires unlikely API usage to be vulnerable."
}{
"binaries": [
{
"binary_version": "3.5.2-2ubuntu0~16.04.4~14.04.1+esm7",
"binary_name": "idle-python3.5"
},
{
"binary_version": "3.5.2-2ubuntu0~16.04.4~14.04.1+esm7",
"binary_name": "libpython3.5"
},
{
"binary_version": "3.5.2-2ubuntu0~16.04.4~14.04.1+esm7",
"binary_name": "libpython3.5-dev"
},
{
"binary_version": "3.5.2-2ubuntu0~16.04.4~14.04.1+esm7",
"binary_name": "libpython3.5-minimal"
},
{
"binary_version": "3.5.2-2ubuntu0~16.04.4~14.04.1+esm7",
"binary_name": "libpython3.5-stdlib"
},
{
"binary_version": "3.5.2-2ubuntu0~16.04.4~14.04.1+esm7",
"binary_name": "libpython3.5-testsuite"
},
{
"binary_version": "3.5.2-2ubuntu0~16.04.4~14.04.1+esm7",
"binary_name": "python3.5"
},
{
"binary_version": "3.5.2-2ubuntu0~16.04.4~14.04.1+esm7",
"binary_name": "python3.5-dev"
},
{
"binary_version": "3.5.2-2ubuntu0~16.04.4~14.04.1+esm7",
"binary_name": "python3.5-examples"
},
{
"binary_version": "3.5.2-2ubuntu0~16.04.4~14.04.1+esm7",
"binary_name": "python3.5-minimal"
},
{
"binary_version": "3.5.2-2ubuntu0~16.04.4~14.04.1+esm7",
"binary_name": "python3.5-venv"
}
],
"priority_reason": "Requires unlikely API usage to be vulnerable."
}{
"binaries": [
{
"binary_version": "2.7.12-1ubuntu0~16.04.18+esm18",
"binary_name": "idle-python2.7"
},
{
"binary_version": "2.7.12-1ubuntu0~16.04.18+esm18",
"binary_name": "libpython2.7"
},
{
"binary_version": "2.7.12-1ubuntu0~16.04.18+esm18",
"binary_name": "libpython2.7-dev"
},
{
"binary_version": "2.7.12-1ubuntu0~16.04.18+esm18",
"binary_name": "libpython2.7-minimal"
},
{
"binary_version": "2.7.12-1ubuntu0~16.04.18+esm18",
"binary_name": "libpython2.7-stdlib"
},
{
"binary_version": "2.7.12-1ubuntu0~16.04.18+esm18",
"binary_name": "libpython2.7-testsuite"
},
{
"binary_version": "2.7.12-1ubuntu0~16.04.18+esm18",
"binary_name": "python2.7"
},
{
"binary_version": "2.7.12-1ubuntu0~16.04.18+esm18",
"binary_name": "python2.7-dev"
},
{
"binary_version": "2.7.12-1ubuntu0~16.04.18+esm18",
"binary_name": "python2.7-examples"
},
{
"binary_version": "2.7.12-1ubuntu0~16.04.18+esm18",
"binary_name": "python2.7-minimal"
}
],
"priority_reason": "Requires unlikely API usage to be vulnerable."
}{
"binaries": [
{
"binary_version": "3.5.2-2ubuntu0~16.04.13+esm19",
"binary_name": "idle-python3.5"
},
{
"binary_version": "3.5.2-2ubuntu0~16.04.13+esm19",
"binary_name": "libpython3.5"
},
{
"binary_version": "3.5.2-2ubuntu0~16.04.13+esm19",
"binary_name": "libpython3.5-dev"
},
{
"binary_version": "3.5.2-2ubuntu0~16.04.13+esm19",
"binary_name": "libpython3.5-minimal"
},
{
"binary_version": "3.5.2-2ubuntu0~16.04.13+esm19",
"binary_name": "libpython3.5-stdlib"
},
{
"binary_version": "3.5.2-2ubuntu0~16.04.13+esm19",
"binary_name": "libpython3.5-testsuite"
},
{
"binary_version": "3.5.2-2ubuntu0~16.04.13+esm19",
"binary_name": "python3.5"
},
{
"binary_version": "3.5.2-2ubuntu0~16.04.13+esm19",
"binary_name": "python3.5-dev"
},
{
"binary_version": "3.5.2-2ubuntu0~16.04.13+esm19",
"binary_name": "python3.5-examples"
},
{
"binary_version": "3.5.2-2ubuntu0~16.04.13+esm19",
"binary_name": "python3.5-minimal"
},
{
"binary_version": "3.5.2-2ubuntu0~16.04.13+esm19",
"binary_name": "python3.5-venv"
}
],
"priority_reason": "Requires unlikely API usage to be vulnerable."
}{
"binaries": [
{
"binary_version": "2.7.17-1~18.04ubuntu1.13+esm13",
"binary_name": "idle-python2.7"
},
{
"binary_version": "2.7.17-1~18.04ubuntu1.13+esm13",
"binary_name": "libpython2.7"
},
{
"binary_version": "2.7.17-1~18.04ubuntu1.13+esm13",
"binary_name": "libpython2.7-dev"
},
{
"binary_version": "2.7.17-1~18.04ubuntu1.13+esm13",
"binary_name": "libpython2.7-minimal"
},
{
"binary_version": "2.7.17-1~18.04ubuntu1.13+esm13",
"binary_name": "libpython2.7-stdlib"
},
{
"binary_version": "2.7.17-1~18.04ubuntu1.13+esm13",
"binary_name": "libpython2.7-testsuite"
},
{
"binary_version": "2.7.17-1~18.04ubuntu1.13+esm13",
"binary_name": "python2.7"
},
{
"binary_version": "2.7.17-1~18.04ubuntu1.13+esm13",
"binary_name": "python2.7-dev"
},
{
"binary_version": "2.7.17-1~18.04ubuntu1.13+esm13",
"binary_name": "python2.7-examples"
},
{
"binary_version": "2.7.17-1~18.04ubuntu1.13+esm13",
"binary_name": "python2.7-minimal"
}
],
"priority_reason": "Requires unlikely API usage to be vulnerable."
}{
"binaries": [
{
"binary_version": "2.7.18-1~20.04.7+esm8",
"binary_name": "idle-python2.7"
},
{
"binary_version": "2.7.18-1~20.04.7+esm8",
"binary_name": "libpython2.7"
},
{
"binary_version": "2.7.18-1~20.04.7+esm8",
"binary_name": "libpython2.7-dev"
},
{
"binary_version": "2.7.18-1~20.04.7+esm8",
"binary_name": "libpython2.7-minimal"
},
{
"binary_version": "2.7.18-1~20.04.7+esm8",
"binary_name": "libpython2.7-stdlib"
},
{
"binary_version": "2.7.18-1~20.04.7+esm8",
"binary_name": "libpython2.7-testsuite"
},
{
"binary_version": "2.7.18-1~20.04.7+esm8",
"binary_name": "python2.7"
},
{
"binary_version": "2.7.18-1~20.04.7+esm8",
"binary_name": "python2.7-dev"
},
{
"binary_version": "2.7.18-1~20.04.7+esm8",
"binary_name": "python2.7-examples"
},
{
"binary_version": "2.7.18-1~20.04.7+esm8",
"binary_name": "python2.7-minimal"
}
],
"priority_reason": "Requires unlikely API usage to be vulnerable."
}{
"binaries": [
{
"binary_version": "3.9.5-3ubuntu0~20.04.1+esm6",
"binary_name": "idle-python3.9"
},
{
"binary_version": "3.9.5-3ubuntu0~20.04.1+esm6",
"binary_name": "libpython3.9"
},
{
"binary_version": "3.9.5-3ubuntu0~20.04.1+esm6",
"binary_name": "libpython3.9-dev"
},
{
"binary_version": "3.9.5-3ubuntu0~20.04.1+esm6",
"binary_name": "libpython3.9-minimal"
},
{
"binary_version": "3.9.5-3ubuntu0~20.04.1+esm6",
"binary_name": "libpython3.9-stdlib"
},
{
"binary_version": "3.9.5-3ubuntu0~20.04.1+esm6",
"binary_name": "libpython3.9-testsuite"
},
{
"binary_version": "3.9.5-3ubuntu0~20.04.1+esm6",
"binary_name": "python3.9"
},
{
"binary_version": "3.9.5-3ubuntu0~20.04.1+esm6",
"binary_name": "python3.9-dev"
},
{
"binary_version": "3.9.5-3ubuntu0~20.04.1+esm6",
"binary_name": "python3.9-examples"
},
{
"binary_version": "3.9.5-3ubuntu0~20.04.1+esm6",
"binary_name": "python3.9-full"
},
{
"binary_version": "3.9.5-3ubuntu0~20.04.1+esm6",
"binary_name": "python3.9-minimal"
},
{
"binary_version": "3.9.5-3ubuntu0~20.04.1+esm6",
"binary_name": "python3.9-venv"
}
],
"priority_reason": "Requires unlikely API usage to be vulnerable."
}{
"binaries": [
{
"binary_version": "2.7.18-13ubuntu1.5+esm7",
"binary_name": "idle-python2.7"
},
{
"binary_version": "2.7.18-13ubuntu1.5+esm7",
"binary_name": "libpython2.7"
},
{
"binary_version": "2.7.18-13ubuntu1.5+esm7",
"binary_name": "libpython2.7-dev"
},
{
"binary_version": "2.7.18-13ubuntu1.5+esm7",
"binary_name": "libpython2.7-minimal"
},
{
"binary_version": "2.7.18-13ubuntu1.5+esm7",
"binary_name": "libpython2.7-stdlib"
},
{
"binary_version": "2.7.18-13ubuntu1.5+esm7",
"binary_name": "libpython2.7-testsuite"
},
{
"binary_version": "2.7.18-13ubuntu1.5+esm7",
"binary_name": "python2.7"
},
{
"binary_version": "2.7.18-13ubuntu1.5+esm7",
"binary_name": "python2.7-dev"
},
{
"binary_version": "2.7.18-13ubuntu1.5+esm7",
"binary_name": "python2.7-examples"
},
{
"binary_version": "2.7.18-13ubuntu1.5+esm7",
"binary_name": "python2.7-minimal"
}
],
"priority_reason": "Requires unlikely API usage to be vulnerable."
}