CVE:CVE-2019-5010
CNNVD:CNNVD-201901-903
Python是Python软件基金会的一套开源的、面向对象的程序设计语言。该语言具有可扩展、支持模块和包、支持多种平台等特点。
Python 2.7.11版本和3.7.2版本中的X509证书解析器存在代码问题漏洞。攻击者可借助特制的X509凭证利用该漏洞造成拒绝服务（空指针逆向引用）。
solution:Upgrade python python to a higher version than 2.7.16,3.4.10,3.5.7,3.6.9,3.7.3,and avoid the version [2.7.0,2.7.16),[3.4.0,3.4.10),[3.5.0,3.5.7),[3.6.0,3.6.9),[3.7.0,3.7.3); Upgrade opensuse leap to a higher version than 15.1,and avoid the version 15.1; Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0; Upgrade redhat enterprise_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade redhat enterprise_linux_eus to a higher version than 8.1,8.2,8.4,8.6,and avoid the version 8.1,8.2,8.4,8.6; Upgrade redhat enterprise_linux_server_aus to a higher version than 8.2,8.4,8.6,and avoid the version 8.2,8.4,8.6; Upgrade redhat enterprise_linux_server_tus to a higher version than 8.2,8.4,8.6,and avoid the version 8.2,8.4,8.6