ssl.SSLContext.wrap_bio() didn’t require the server_hostname argument
\nto not be None if ssl.SSLContext.check_hostname was set. Due to a
\nmissing parameter check in SSLObject, if the server_hostname argument
\nisn’t supplied then hostname verification would be silently skipped.<\/p>\n
This defect could lead to programs where certificate hostname verification
\n*appeared* to be succeeding with SSLContext.check_hostname = True and no
\nValueError being raised due to misconfiguration.<\/p>\n
If the program passes a server_hostname value that isn’t an empty string
\nor None to any of these APIs then certificate hostname verification
\nproceeds as expected and the program is not affected by this vulnerability.<\/p>\n
Mitigating this vulnerability doesn’t require updating Python or applying
\nthe patch. To mitigate, pass a valid non-None and non-empty
\nserver_hostname value to SSLContext.wrap_bio(),
\nasyncio.create_connection(), or asyncio.loop.start_tls() and
\ncertificate hostname verification will proceed as expected. Upgrading to
\nthe latest version of Python or applying the patch only changes the
\nbehavior from silently skipping hostname verification to raising a
\nValueError, similar to SSLContext.wrap_socket(), when server_hostname
\nisn’t supplied.<\/p>\n","protected":false},"excerpt":{"rendered":"
ssl.SSLContext.wrap_bio() didn’t require the server_hostname argument
\nto not be None if ssl.SSLContext.check_hostname was set. Due to a
\nmissing parameter check in SSLObject, if the server_hostname arg<\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-31482","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/31482","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=31482"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=31482"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=31482"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}