{"id":"CVE-2024-5642","details":"CPython 3.9 and earlier doesn't disallow configuring an empty list (\"[]\") for SSLContext.set_npn_protocols() which is an invalid value for the underlying OpenSSL API. This results in a buffer over-read when NPN is used (see CVE-2024-5535 for OpenSSL). This vulnerability is of low severity due to NPN being not widely used and specifying an empty list likely being uncommon in-practice (typically a protocol name would be configured).","aliases":["BIT-libpython-2024-5642","BIT-python-2024-5642","BIT-python-min-2024-5642","PSF-2024-6"],"modified":"2026-04-12T11:14:31.866143Z","published":"2024-06-27T21:15:16.070Z","related":["ALSA-2025:23342","ALSA-2025:23530","CGA-wvq5-364w-25wg","SUSE-SU-2024:3076-1","SUSE-SU-2024:3351-1","SUSE-SU-2024:3353-1","SUSE-SU-2024:3470-1","openSUSE-SU-2024:14253-1","openSUSE-SU-2024:14256-1"],"references":[{"type":"WEB","url":"https://jbp.io/2024/06/27/cve-2024-5535-openssl-memory-safety.html"},{"type":"WEB","url":"https://mail.python.org/archives/list/security-announce@python.org/thread/PLP2JI3PJY33YG6P5BZYSSNU66HASXBQ/"},{"type":"WEB","url":"http://www.openwall.com/lists/oss-security/2024/06/28/4"},{"type":"ADVISORY","url":"https://security.netapp.com/advisory/ntap-20240726-0005/"},{"type":"REPORT","url":"https://github.com/python/cpython/issues/121227"},{"type":"FIX","url":"https://github.com/python/cpython/commit/39258d3595300bc7b952854c915f63ae2d4b9c3e"},{"type":"FIX","url":"https://github.com/python/cpython/commit/a2cdbb6e8188ba9ba8b356b28d91bff60e86fe31"},{"type":"FIX","url":"https://github.com/python/cpython/pull/23014"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/python/cpython","events":[{"introduced":"0"},{"fixed":"39258d3595300bc7b952854c915f63ae2d4b9c3e"}]},{"type":"GIT","repo":"https://github.com/python/cpython","events":[{"introduced":"0"},{"fixed":"a2cdbb6e8188ba9ba8b356b28d91bff60e86fe31"}]},{"type":"GIT","repo":"https://github.com/python/cpython","events":[{"introduced":"0"},{"fixed":"39258d3595300bc7b952854c915f63ae2d4b9c3e"}]}],"versions":["v0.9.8","v0.9.9","v1.0.1","v1.0.2","v1.1","v1.1.1","v1.2","v1.2b1","v1.2b2","v1.2b3","v1.2b4","v1.3","v1.3b1","v1.4","v1.4b1","v1.4b2","v1.4b3","v1.5","v1.5.1","v1.5.2","v1.5.2a1","v1.5.2a2","v1.5.2b1","v1.5.2b2","v1.5.2c1","v1.5a1","v1.5a2","v1.5a3","v1.5a4","v1.5b1","v1.5b2","v1.6a1","v1.6a2","v2.0","v2.0b1","v2.0b2","v2.0c1","v2.1","v2.1a1","v2.1a2","v2.1b1","v2.1b2","v2.1c1","v2.1c2","v2.2a3","v2.3c1","v2.3c2","v2.4","v2.4a1","v2.4a2","v2.4a3","v2.4b1","v2.4b2","v2.4c1","v3.0a1","v3.0a2","v3.0a3","v3.0a4","v3.0a5","v3.0b1","v3.0b2","v3.0b3","v3.0rc1","v3.0rc2","v3.0rc3","v3.1","v3.10.0a1","v3.10.0a7","v3.1a1","v3.1a2","v3.1b1","v3.1rc1","v3.1rc2","v3.2a1","v3.2a2","v3.2a3","v3.2a4","v3.2b1","v3.2b2","v3.2rc1","v3.2rc2","v3.2rc3","v3.3.0a2","v3.3.0a3","v3.3.0a4","v3.3.0b1","v3.3.0b2","v3.3.0rc1","v3.3.0rc2","v3.3.0rc3","v3.4.0a1","v3.4.0a2","v3.4.0a3","v3.4.0a4","v3.4.0b1","v3.4.0b2","v3.4.0b3","v3.5.0a1","v3.5.0a2","v3.5.0a3","v3.5.0a4","v3.5.0b1","v3.6.0a3","v3.6.0b1","v3.7.0a2","v3.9.0a2","v3.9.0b1","v3.9.0b3","v3.9.0b5","v3.9.11","v3.9.12","v3.9.13","v3.9.14","v3.9.15","v3.9.16","v3.9.17","v3.9.18","v3.9.19","v3.9.2","v3.9.20","v3.9.21","v3.9.22","v3.9.23","v3.9.2rc1","v3.9.5","v3.9.6","v3.9.7","v3.9.8","v3.9.9"],"database_specific":{"vanir_signatures_modified":"2026-04-12T11:14:31Z","vanir_signatures":[{"signature_type":"Function","id":"CVE-2024-5642-02631552","signature_version":"v1","deprecated":false,"target":{"function":"context_clear","file":"Modules/_ssl.c"},"digest":{"function_hash":"172144249819700853988098187141215252814","length":359},"source":"https://github.com/python/cpython/commit/39258d3595300bc7b952854c915f63ae2d4b9c3e"},{"signature_type":"Function","id":"CVE-2024-5642-0da07f09","signature_version":"v1","deprecated":false,"target":{"function":"_advertiseNPN_cb","file":"Modules/_ssl.c"},"digest":{"function_hash":"78340740555992684681138249543195559778","length":347},"source":"https://github.com/python/cpython/commit/39258d3595300bc7b952854c915f63ae2d4b9c3e"},{"signature_type":"Function","id":"CVE-2024-5642-0e374b23","signature_version":"v1","deprecated":false,"target":{"function":"PyInit__ssl","file":"Modules/_ssl.c"},"digest":{"function_hash":"16683179411474361895433822761204703793","length":423},"source":"https://github.com/python/cpython/commit/39258d3595300bc7b952854c915f63ae2d4b9c3e"},{"signature_type":"Function","id":"CVE-2024-5642-12a3deb6","signature_version":"v1","deprecated":false,"target":{"function":"_setup_ssl_threads","file":"Modules/_ssl.c"},"digest":{"function_hash":"64604704335052751155971350359931235025","length":717},"source":"https://github.com/python/cpython/commit/39258d3595300bc7b952854c915f63ae2d4b9c3e"},{"signature_type":"Function","id":"CVE-2024-5642-1a7379b6","signature_version":"v1","deprecated":false,"target":{"function":"PySSL_set_context","file":"Modules/_ssl.c"},"digest":{"function_hash":"111733541829671662923341429514344782598","length":636},"source":"https://github.com/python/cpython/commit/39258d3595300bc7b952854c915f63ae2d4b9c3e"},{"signature_type":"Function","id":"CVE-2024-5642-2067aef7","signature_version":"v1","deprecated":false,"target":{"function":"SSL_CTX_get_default_passwd_cb_userdata","file":"Modules/_ssl.c"},"digest":{"function_hash":"262840908154440595085703719912117700667","length":96},"source":"https://github.com/python/cpython/commit/39258d3595300bc7b952854c915f63ae2d4b9c3e"},{"signature_type":"Line","id":"CVE-2024-5642-23a05e0a","signature_version":"v1","deprecated":false,"target":{"file":"Modules/clinic/_hashopenssl.c.h"},"digest":{"line_hashes":["188754726062703137456425357121077216357","202272849355704959352334020592039497672","304905807226787371816558323924444081577","156570142447418327480552565596330257705","287365162501469572909316578413698070741","274441945049488870042584531461002557730","248706108894361471838599806463255670380","297459931349090955587720575057086933523","93905482422032662023899150638578621649","138081511096524569061174130351010858747","286849032105069495969739566504436011203","7265761978010747721251018313716632717","315091422850914537291700309715729644078","182514558470373089861770904522623702361","134682526843828532488555439933576763576","208016751049150934760099284995190335167","39166918304717881423721500777895894102","167218704502307457381307564434475741130"],"threshold":0.9},"source":"https://github.com/python/cpython/commit/39258d3595300bc7b952854c915f63ae2d4b9c3e"},{"signature_type":"Function","id":"CVE-2024-5642-2e4bbae0","signature_version":"v1","deprecated":false,"target":{"function":"PySSL_get_session","file":"Modules/_ssl.c"},"digest":{"function_hash":"143399700186366961989326612981680050267","length":596},"source":"https://github.com/python/cpython/commit/39258d3595300bc7b952854c915f63ae2d4b9c3e"},{"signature_type":"Line","id":"CVE-2024-5642-2e5ae02c","signature_version":"v1","deprecated":false,"target":{"file":"Modules/clinic/_ssl.c.h"},"digest":{"line_hashes":["53241123508996246019438803726548777814","5833629166629195183535229315452557139","122185590702635259551376603111664142281","166378050899880737370955467339090897047","158407179050522816249477045170679342377","327803145848830570073927166406214828710","227090833750301205868758969573745964192","189693608151318479442628841855157181390","317271873291585864702789250818228563536","86258999901859000894428480368543870660","133524972195598698661807818351965078125","210495814707707895373438689894124817107","226579716234786017734795035896036967758","121847476702822765743310927056711551364","177778294957766257221525757058857696754","81704879943174023534330592876612444531","315943099476012690528026865228295251971","51265456082403681393239211808499584022","216208861014133845973340433958196150918","88902541557308640511152399773787799461","333678733361938425656797257124839830821","271882093881318976162941261120147989252","87780377840849709348201111410944005812","307327285866831446576054148512560924905","126963721422658005651537694418409172522","64132894610778462000150767186820797309","335094556021170373057937098542397364392","207586539862514308421317804711256155812","107062820065259488495808323123687833365","254261872336523802822348763887590683252","15110824588271714568181219541774568426","48419879148639478125708127291080505708","260813161029125022325037109543709784523","117580314711527768507106543356514835875","139366739858497602684254245777392051478","326904784548089157320263453282365370798","306294313174242640764848385914997904247","166848508603321330621694980194974573186","327397127050577155822872974241299551927","217964896274180103244272704212512550670","167977428961232348492646230903714238222","243129958429540960224334190555131686839","143460421405215371401448938709963902805","154898178026090298242795633940893575335","41466099613648412640355981364254824194","215678722086081208779142305599628883800","283176262940723024387593694087298616689","38612873356972442995205137851498919490","5802031261024051032216516611491104699","41215703198891887247350954089869483859","162610002086496303895680339948591383524","212349267904317367269705841557455325668","195201291976499009687644757629276310347","161774828500426745068706588016333695365","325805387711026413941692820879150773286","64440214309872032669938238462174437666","8349238049944242152134244714636331799","251548927490328317565754359165437410658","230343236959312198688829003118236308241","211352041827451504221039579684037225713","339048897751145941358633295767391940952","89968193474180067059397408376790761368","58899241618452576471257474596046727569","186259271224841470705823522734752920896","229238469409815275985040443328023421668","294214791642794317891652686903477300249","215960905233151140084814007823874323658","21457491334265960074169163844216247026","298855467902084464318321976448290883530","80154207353010529387855064692731303257","42248545991113880733282540901066065437","44150357569124781978572636515693953412","215996615267645797548511059162838806299","17518177322914293682821882404835800688","307857905611358098132025033416522257910"],"threshold":0.9},"source":"https://github.com/python/cpython/commit/39258d3595300bc7b952854c915f63ae2d4b9c3e"},{"signature_type":"Function","id":"CVE-2024-5642-2f779d6a","signature_version":"v1","deprecated":false,"target":{"function":"_ssl_threadid_callback","file":"Modules/_ssl.c"},"digest":{"function_hash":"204535171567642022574147897057645861004","length":79},"source":"https://github.com/python/cpython/commit/39258d3595300bc7b952854c915f63ae2d4b9c3e"},{"signature_type":"Function","id":"CVE-2024-5642-319ebb8a","signature_version":"v1","deprecated":false,"target":{"function":"hashlib_openssl_legacy_init","file":"Modules/_hashopenssl.c"},"digest":{"function_hash":"180960690063549876320221471760375912112","length":172},"source":"https://github.com/python/cpython/commit/39258d3595300bc7b952854c915f63ae2d4b9c3e"},{"signature_type":"Function","id":"CVE-2024-5642-33df1826","signature_version":"v1","deprecated":false,"target":{"function":"X509_NAME_ENTRY_set","file":"Modules/_ssl.c"},"digest":{"function_hash":"65050986314855617039836980962079270175","length":71},"source":"https://github.com/python/cpython/commit/39258d3595300bc7b952854c915f63ae2d4b9c3e"},{"signature_type":"Function","id":"CVE-2024-5642-3d0fc736","signature_version":"v1","deprecated":false,"target":{"function":"sslmodule_init_constants","file":"Modules/_ssl.c"},"digest":{"function_hash":"57332381035826525045470246776839113102","length":7474},"source":"https://github.com/python/cpython/commit/39258d3595300bc7b952854c915f63ae2d4b9c3e"},{"signature_type":"Function","id":"CVE-2024-5642-40f6fec5","signature_version":"v1","deprecated":false,"target":{"function":"PySSL_RAND","file":"Modules/_ssl.c"},"digest":{"function_hash":"318936526977407078902607456520466081863","length":896},"source":"https://github.com/python/cpython/commit/39258d3595300bc7b952854c915f63ae2d4b9c3e"},{"signature_type":"Function","id":"CVE-2024-5642-4121cb29","signature_version":"v1","deprecated":false,"target":{"function":"_ssl__SSLContext__set_npn_protocols_impl","file":"Modules/_ssl.c"},"digest":{"function_hash":"292267134828344734760311917538551635823","length":604},"source":"https://github.com/python/cpython/commit/39258d3595300bc7b952854c915f63ae2d4b9c3e"},{"signature_type":"Function","id":"CVE-2024-5642-41b76346","signature_version":"v1","deprecated":false,"target":{"function":"HMAC_CTX_new","file":"Modules/_hashopenssl.c"},"digest":{"function_hash":"282081251060182625427628370792056842336","length":173},"source":"https://github.com/python/cpython/commit/39258d3595300bc7b952854c915f63ae2d4b9c3e"},{"signature_type":"Function","id":"CVE-2024-5642-426c9ea8","signature_version":"v1","deprecated":false,"target":{"function":"set_options","file":"Modules/_ssl.c"},"digest":{"function_hash":"39474636976086232599202673599644904414","length":491},"source":"https://github.com/python/cpython/commit/39258d3595300bc7b952854c915f63ae2d4b9c3e"},{"signature_type":"Function","id":"CVE-2024-5642-463d8d4b","signature_version":"v1","deprecated":false,"target":{"function":"_ssl_thread_locking_function","file":"Modules/_ssl.c"},"digest":{"function_hash":"335302474708333638394037353103081581868","length":315},"source":"https://github.com/python/cpython/commit/39258d3595300bc7b952854c915f63ae2d4b9c3e"},{"signature_type":"Function","id":"CVE-2024-5642-4ac7515d","signature_version":"v1","deprecated":false,"target":{"function":"X509_OBJECT_get_type","file":"Modules/_ssl.c"},"digest":{"function_hash":"202527720751989738062984915654789615199","length":66},"source":"https://github.com/python/cpython/commit/39258d3595300bc7b952854c915f63ae2d4b9c3e"},{"signature_type":"Function","id":"CVE-2024-5642-4d734f3f","signature_version":"v1","deprecated":false,"target":{"function":"SSL_SESSION_has_ticket","file":"Modules/_ssl.c"},"digest":{"function_hash":"257247179000770863027637495033969820921","length":98},"source":"https://github.com/python/cpython/commit/39258d3595300bc7b952854c915f63ae2d4b9c3e"},{"signature_type":"Function","id":"CVE-2024-5642-4df801a6","signature_version":"v1","deprecated":false,"target":{"function":"X509_OBJECT_get0_X509","file":"Modules/_ssl.c"},"digest":{"function_hash":"162534706655343182277114171726889080609","length":75},"source":"https://github.com/python/cpython/commit/39258d3595300bc7b952854c915f63ae2d4b9c3e"},{"signature_type":"Line","id":"CVE-2024-5642-537bfff5","signature_version":"v1","deprecated":false,"target":{"file":"Modules/_hashopenssl.c"},"digest":{"line_hashes":["95404347949033073742868394724620589522","1465214447706259565687565615011597487","87073756382871806189037483044034600056","90288846545497329382678096462412203813","313455318742652996881230214022477768821","144746969788225352049187584099181767781","70098033888900149233403691648921601381","152821657293572253646199340101455805330","61406746252201094565074538382353486877","271398803048685751075367382591766700660","219029428398249736889294113782207947456","318617198794720737637123059499665634327","279527524734459040577961469509960574265","285099597635958432144029439883963966247","147313082522180005283111674120521515505","214833683510146668944857089587685950971","308588347944534289695437404964845069615","313320230560725606893732893562875875854","246784668089456718798762759975288056002","282025621438727968586790481505881306552","86697934376514746501463589222408599807","21347299147247252282296827772534190580","190910543153356607031999414232470415989","224385381770627093215337971052060624728","289571267612047072966576752342279215341","244421765012203163525024716281127494526","200894301767014779442427329189179404039","151354231510528574572688470600886059980","244524065930674951814035615707415028656","9063770022806175144855711919447402436","195092424318531145267918682846201366552","240893852671269521738384823988560597304","105308185565265889072969149051797402760","302831216135453803365002310752230726639","196297814355818436094852471513868870414","86704684142994527068054376850098554213","173611934350124006847878568091384840503","144343182269032237001444115034050493038","9411887962710147447841683628746113303","312025071761968735939858155259293030880","147624745152349424254298997459215399983","71566220409178810027915640376404964684","16421983663599651813423526868639340562","298630590345381802528383109852965499552","159061503106792072617526914854874231413","324215948893921465552132928615695482463","3200507046766566564192192183994827387","185123497296668664060711574818665831248","268798538488178726810550944484595617138","102861261611965523257074258709294608435","95000962403850861187231326861054880428","245935615435893633983195450058698140598","163604850432306348895669030457849978758","263467029733972319601764602176096455282","262449391506131819450118110921731057448","283157285171639628630818682352592901383","123134865328808387009262884356847939226","143381883567464977395350413977359118347","214525261652370330335229907548546428485","236905415850418900577808731374004538724","145632657501085937796467772714819261879","159102587619219684406433072821736471094","253680243884695091828650033399776477835","291018093214988792724059604339059868454","256259412366768790901757655310658987367","257934695502038119390765287198945711770"],"threshold":0.9},"source":"https://github.com/python/cpython/commit/39258d3595300bc7b952854c915f63ae2d4b9c3e"},{"signature_type":"Function","id":"CVE-2024-5642-58249308","signature_version":"v1","deprecated":false,"target":{"function":"fill_and_set_sslerror","file":"Modules/_ssl.c"},"digest":{"function_hash":"590408339321738419628445777926732652","length":2711},"source":"https://github.com/python/cpython/commit/39258d3595300bc7b952854c915f63ae2d4b9c3e"},{"signature_type":"Function","id":"CVE-2024-5642-67392dd5","signature_version":"v1","deprecated":false,"target":{"function":"context_dealloc","file":"Modules/_ssl.c"},"digest":{"function_hash":"62586989743688238478970119080943998922","length":331},"source":"https://github.com/python/cpython/commit/39258d3595300bc7b952854c915f63ae2d4b9c3e"},{"signature_type":"Line","id":"CVE-2024-5642-6bd72b0b","signature_version":"v1","deprecated":false,"target":{"file":"Modules/_ssl.c"},"digest":{"line_hashes":["303363669907235740351645272539757825973","26514130098080532308527947355680610258","276196073936528051489965289540369374222","182792253431607302645118255404580674419","185286436026466161032992865473572044984","322710239861673744966318571512455751609","299056204152843303490291279113085461365","314966516550254361588843681028877311424","27945554020336063125776798327141492328","262827710536107466694726488264298606726","206545136655073778564874612597205037914","221392264813199236486019496176490914605","29819463611098739650439669400976704133","117175794227564282744459413842344028725","2299020236454615300472542145198457398","14189426489165015960592699006855605353","150153890241401114701408806323025003589","293195415644314879201936041769551363337","73758497884428193149027843637736551467","93560880500282977101144380098658707784","55261330543922468996300210260129676236","25566761639648605933813349337674417589","332526544045531268727307429994201944875","168310914928383144106826948548497858570","34637427102374490192429897843993450157","245066508157584646739960681652001268075","298083216770875508647889175749887806695","112806490382328744708534595222546407591","262909644382450144142022125631604669440","162910182408913576601584186189158925433","8226238643627939536795837592838608343","239356323967826887802125984421507567653","234158268560295329722296695591422693074","239851906586531641444101785616171985210","17204941689203344716082339904610550009","267752872639307384570326433761536088859","222095516718502644747446687773062370131","261257746241771035994188809620385264350","58552967676410758969749466194063167624","187463726989599694636443229886967805674","71705271065867577376719267571159162114","297145211214545331225054763498725155172","68439615706647489691063372882388135053","285193853907745799268463873302964240817","192619829847513004114804030795954463908","180251562894575104942502343066934799576","260379324954914530574570222577882620401","50828035201213680792331399158112011799","65994431661244974745289257456993329159","95220324293958275885569596760019708088","297872836803354586843037178674370361153","336995774515465140325655699794680565354","220301602552249839060295597081088862747","153707601271904422264833791749340611801","153788529729825661102237166308658750590","331123724924255399827116639725164961968","334498173267499640040162129022373266376","212784379328404494526372829999890120040","278268886922849560231377823889242063954","124225378416827728236626818592115953188","148327040369168156256155532977890855178","335879570976539612582366573483112623706","275414304394903606773350393254443123061","180169793225911707115017851036977003879","269366087910768782646223639065562016884","34661420226127041158624802704967704098","62289439410198415081491295293011089111","316167710731631884976181430097008542407","248871256654612555649219126718458016396","202481168242675733166209186242875345156","22226879184653045881561877540193016797","328725861640779977133918136950525759262","176575360516298145586003764671790671061","273475208623164546534310895239676045234","179268020807565678598847177696430265940","166070866751155732814275539545177946678","23053254777412143059025397118853745360","111947801874539612033175778360617267204","270632892360542783472542517466921601247","63942363530085055395308711295064536347","189477751534227111455660560634733260508","31876644999822595659618675160317731210","56097457990701386567130755467851821667","148308904675715450951100932798594406708","303425470139193944156974317470407896341","99301064193603350066759908563974963464","105524599442876233228720239833764145883","104998208725285707094451965153590522542","49767755684817030469889459023800747508","73615207965223218386453429184518101069","289015738389223945596844509668718717469","284231205514253080048652523908914805086","305768819178192289211140360373703191038","29714922886291371785923700458876344334","147525348398323150216004902780589533715","260997585919515905587823871786925800366","113642400637999630878689633219785769558","277066232254102267583743577955547921576","162437783052215159443256178908386625318","316939723614406166276974714826457049461","94403639437734452199255553079342897744","178051434068877940033160865498304822436","176931322679442189358487218591299422657","102610450081532614480197032306104538978","326058389821656960029167265467394169939","31927008950764222412435720124027958653","148573189180561047016853517816973896605","82434526956732832967291665447396699717","262618369666161599910557271758753467856","11129255590681441913440745753495172029","267207633037527177114702127480833877216","59779783811075703782637249927113431467","288347379245687701282600465214296076734","283288779758665667183877050753857262082","179556580393984012979895448620214022764","23683372821470404349766501935159170569","29671069284548025895433118250506208633","55910114873920024907051796072475954926","275294706454802022512003723801117974982","174274338688578509550684733752303892465","20576198584565705202256315422968131483","146522950284740345261547821930456896235","7909653600199053238246598359099059696","321347328474671760805998818574714212824","12329757040050076462521216487568032403","190114661885590516100962895649943165108","137658991649028238089070625979514534019","105246130658529052197762662976409645192","160128405125366715549308577112629972513","68156121445040538407969130630517388998","155569229063342589132154068473751023768","78601352620646292355595396542773449005","130861908972277659114950998065209524692","114294884765050204897956986339937906852","1843224347799236523730951685643996410","224418269258447107288266444883336564033","82667183818627134305408746910830988762","279216947176752664885505673515246202325","111022932699323481362016561335851626769","79992769840548081191879470412923512937","55600677608539740332022105445421639471","256811052068633903787758969000342832204","57103413574193688404018072744595735293","241506535815869475092214395690971975577","272657101201805763093605822310928238509","4044786075893060523545919399777709057","68769568483405304049315897821412787950","122314224579065998494897312419616245536","55600677608539740332022105445421639471","32147193204986057972211012144825803538","200098732139242786930532367257771674483","122897442693922175682925237872882818063","195867631947182479404881685474658864646","36885862687510715850029949398494769859","211012901221560468220981995417023656224","74206136910637926264737489192091621166","309689406562163182849958978489334698264","263635124727638321497479201674076785531","205529270533058339584108791824916919109","48625797208560531907905210323847362093","137523037529882549978755829758224716950","24793551185261588868307680479072654786","190259673631155022035034271709955008855","82926269862733103338160747756939187226","257575954846169999613540583567925910347","273275434595094468937360282365203398921","69439494631352568484531976559012569247","183380724152974732503930519655723092241","193055098221129802871215765594762462097","178926579526181911826241137084297272080","150511198487528788197971834168573419220","188404131477806193812401271618440240227","118904081902220361808733956668684654772","270373954603005542086316662931745820488","261287643886144785331992688224238933932","184426720981326918605080080844004304475","53327750867938877092797390342072482689","132895230068853541507458987180885606720","89098978278113410688711308767118184819","197237189824216969534214282617955922290","211790452208381346011030590029000164991","116596609978683931994129647455216604857","57509542435407821141937757186435667435","284038070296346099095897061640545406616","117251803589270137464837074131727566162","62768298978359978012090886654322848635","172739861076921070950462633114496130787","83783461936862384716829517692126105495","97321492304390395934353940531217110970","280751857064078542176511393253224128348","272299965915535873766352219751889006124","244715832123700156665601317773324041522","163441592331561046438532639360708469764","270383903792079887562053715121257690401","67267805332313528882596495001844992940","191928885609804583045877993835517539614","221496827289493322853353967035973675521","148794266145187459350596945124821873103","103468697362781869025248520357761123899","11853743682831338142040214027404824400","279483583431086656581856820487349339720","106075869392636570651731106128898900141","136209254500442032176861663412369848616","319320835050226555786336377245206802050","219431303931509898607194057615449980602","276422747887790760857985572635859502156","106075869392636570651731106128898900141","242763781719527262569194217557059519858","170306576702225378311319796163098332304","226158401145224970576457050536108195359","319124485171224379234359362710866467488","260985284193962013598896349448296413057","60766076335588453543874224515488337549","39761880299049269487332796370495693706","158764716013434661235615663823732625474","107053044299511808100601370289769549332","23341683597466247909916453804779285208","201918588495194747449062826694685052712","142753940120576471598361114208811325391","12054751034884828949182663994896408064","287161152535133213079329731458551723382","162194000694489970472913873416765871305","326323810874979510310624259355005801313","235266456003480010112075434723568460565","72719755593782965273287277050615491152","39020447920929506486577090896596120768","290495828566685465131074891424079105299","316982578129414589413025931360762731580","92958197460186121415339410592639963542","199059875873118087849958796635970167907","259599607753814570282237909747095581919","293233875285642143788066778898760259870","149550000435233572186490798895044224988","66674147068263073221083277310676471331","185694881376930806571663429994659715981","154451443628555826974643042671940628925","281225471421414291673321807594693945237","117847892633646362606553439680362369606","174121414062804270347647946727300920850","57788823213919312438974291023234730012","78460460759768773088861428144967860996","330222479252927775773109981485620122061","33300754596737348654997221664220969579","164442961198563939333874034241419902991","300876168726988529426812427361141063962","318491741919653781137782412909187973175","256858305981492391572181607275249522448","4541851224642496357224382388332079363","74946510221828971487246104781106221920","300918126848887280143370290188010063019","10685428673386162489542875929846083803","100022324113300903629860477275085291420","159171915450703037335286983894791631379","117221588112081165421794209917304082215","332258466081040896728659684590169623306","325492871860661480888383926440340227294","81684391782657484673427684807853721703","39894912796515093834566033251504312293","339676233304750263769149741442270679931","183573100679050082508012479310021186037","14605260238537853642581777338910653435","299093011944321650230819529793945124424","77610716282598234308844067737322103664","203903927133640927733955517258423813777","42371517319958749124874687256626798581","221550257603812086899369619145404644760","23700493279199918544815058694825815471","27800291301444898189859925571893820399","215398060519652450614267860116742516765","165523093942678143536448225276203823679","153016762508149066008782825902890519830","302058354869796507870251242140691993026","96613541955369071394884865048705916524","10599736095542227259690317789745015836","91466076427494764350214235411969461500","253314695041375308863234657790677155298","227371736332897379912675996325672724299","201876880711192882548431282948398164834","326517244587940722490151429396867501076","69015328922867358299159993306846408454","285329924450543209007292727410178192778","125348762028110504729547981127478482926","281430262963913356134611321732741765358","15754059579666360047918881914808176908","144116143023272036673593116410117441425","170129217685589024685299980522305944660","10783738968953972978290267648920916106","149416299011515465794206786329607744434","38653653774348530753029490719994780214","140838292204771031090980031816610739743","219166019083261522993743391190030297105","42916931311222500963697564058961183795","218904277188917612082923298925047857975","71802309675308116214312682462451220196","316165521477198976450901971455860010987","257301995546681626422096928601297557300","76520117574484785313120224724823155473","252691165197647598759147392974765320529","116778588953326571378666594084456293783","241530836346489304177042368337452062094","241446118503416131257125424415413520419","226484557401206926135705189339346147241","240608797739544875765779569879794653263","165651608991083484624368192804224331593","311946236953610420394198832253718905","276345964814358432885805417587091172798","324189587232545233666070463078290951402","89026339661676538692779179424642959873","130646690739355465083566959576454355524","102033212444635261798351500242532525421","302410083233936589777350087459131812829","288770781692246949090942037314179905608","188956107749846352582741740062560683995","231138047009338091394474989731784247449","33949175054095918361907686315288924877","68060751143097064967654732775794527094","313371467252768467620910050144450875276","70576462432893351156765205531147711675","79100807253232539166070853911421900480","75363851897436514116569766330232901741","1492684122007260344702429098109587407","98730393786818510725018840039077133030","37428115359955192798644271914413608424","72321065652746948080172695836150252632","128448908725793997671972028695006803296","160042384929810766398362111528470694792","200481102318568369795530088238550546426","119757823696467637852294892647562923924","284937633357679065587092205837658960289","53902636246066955333889154488207134948","306423019342307526436188013797596238085","77126178136587087479804853303721495599","335790458497469284225884787911248947065","313585587026210999154279037756743625983","233625453076189654774185265040471683683","17180598337230936827085099107781753555","328124537970216635123120618885522126428","244571741866748603225815726467843027925","222344612631237644288286140296618573812","243967463965798611898775633106002714684","178237803838031998529469275253705103302","227498637844361752620460370748804235641","226534583922567794438246796148641742781","160281507640797546330882332073430973173","122779398784009285325102703251703701875","213534035502395799984939156279718307188","110275249322164170571324957136117128883","79978537829793073340883413986499298730","246768397459192635461424158752199647962","305092398328726593019579288282807046299","72016550770497489669813476866285328753","101643323142049619384738058942949353775","247074779191278946826596489054875704847","7195886280656093674024166779528968961","291194326610673710628577630772279650682","12014602650953311625374056341550231597","52304233097961957866497656345874897294","332312829703202431171274288766744901144","117370900358910194714106064750637382317","123638781272475026121501158720575437372","261455347505435952845133927080403501866","5060842852104189331902664018140293640","162897350019071692533726775566028770654","165894389426826549946503681018779163261","200521075357756774455285961750982700429","161083320219794107835575400027481366155","198274888163220595285560837633083441183","323766994666572405800234845794083152319","91542132226312239147401938726470952270","287807333747466425579157619122517465699","309068318537442448641537847795460557997","268258690407874335802826141392749582709","332918567035075237072065464127360560071","194777568178164423473287574223602409117","87341648705360142391796596734128424226","111900235125470237574816650919924549246","333035246949389835391022917637168572344","298337879907153398455837343714447268868","171139592448483286549894998567994978567","249671636317711162217941637166310129962","165374631414224276507243564825846081049","174192011114312596394900369319956738561","175955101307525932847525111555128443987","71884134541688686659202599735667032387","195574721736062943357778055401366190959","269369015225946799557973031789266920790","56285996967343966894247762858204327831","223800842224044940319440731659750600830","71294555160627287086982078372032997722","80182869564895448293331929368010479314","186393397407943040045262073700076699153","149113649790350817164052135790397028923","96090714966352030772565245367515978008","298099601594551755877109480294504215754","315076489718414244078526352560745033348","236963915551410902782289132286673002524","308010203304915414633018746440790943740","107153935571553116622531558521274747741","190016906164329599201007172624208187241","73105102310590929530975798996122589575","74935342513408171026298425036356718754","49713070617557740077709590383644183186","178779079883257790133916751142547207379","78642284394896001082268499184307346331","101696623611871561679027238186262646237","211319096199885869918192643116255631960","257768908242268474072795819409566651415","174829281861053819390836466686138004567","200548077746266400989076621586115463607","276302204594992483559269620853846547639","322112681665425617269963185846046690738","69997680345976571559518725178782735960","151925590349641885232995028807360022579","95886298069822432311825072371509952630","77276154632439856582217337110383621245","126730021233239992473008286036917837772","83913700513697871928047776738868986436","167012385437372554578690164330671364208","34101433739329961400835031790496071861","264753358614436283283874205767936793864","338200876888082896575857780016965692264","37967546475287550930121996625302654702","305065468072774620848681440023095711699","312279111878013359315564995417165108946","187229086914878130164434672904275000678","86442300235446515728341318617825426538","312928894298019346809812741496899918016","330561752123436726241281717926417902760","275458175289580357252147005806873669388","107625458307394388536544334944147646664","121587978939656932820510014224400736342","316215497282533260272961115399877511254","163325416492722835085252055875282728051","313324015084437934155694476781111134795","68163691341582791066012481524938658776","20323293708516113200603242578648870951","128204245112450501349924295129147978806","15384023584323987738549341085210701430","9287117371569774734482587725097226624","332672072879273458318738480198823518967","103429774517042453390352906562282541461","331425212685566276665248882381090891023","80584211783913008013206756519141557661","168858019148934487146307983272710100411","10170320251949952032855512517982229102","210586725793868993852205910513651118399","275982740969183638880686868018389668287","103295921311079524713934469081323392210","98246351539418245012875665968006012181","8677452177043164861098960724406697510","301022692593736035634987462038999218126","338778486399925601980798386194383861341","307372316598686288938175004847101260738","167218376383287877633809742031787133233","142067713883379618569060246863323075268","37434607025763237478826681529567752146","87432754398838864399741276128177369796","26533203331199716432449985491281899677","310767844792619978644608611363823841798","138096353150637490511808814498304641891","233390482158286083750262773464217959359","90653652417134057690513087551083373158","66500052560838094592907516144612773848","315646580493975414545522433594728362902","299222182806864895042636982746632832327","5379039346943081208712598793302469222","36880217660658474750658199724038398955","172787529721513556694039708919114028401","304090087652199182610979872944240596237","338832257891888523261142492125218999110","114694276247315281467101562782367066809","338250234925067794675070134605904251950","235764422027082257789185113462342968254","50755580736522059822828035051846839710","261021911988528978118036410753529759117","235420969032820362900137908848947161452","293582388255842405357790219424858342210","10125441000891325288529653712480893489","26473254498730415008584022456541268420","178685368809205192652998506689075637518","292047695940584181332677835244559554053","249791124603646610089958781237469272052","40305560140410614212697096517069741944","312251340158229084484084269905491842690","101938368212571799235542830268124378849","105584822947423281303165760344762065947","73192903894609349615210815556182868735","36224332609388442576413640455658869791","210140228709902714956377939062048879035","257334589033063006994660020785455434182","38637949788854442108586800314902465692","3057364796099090302428799263279543184","4714694287848374853465926562177961162","206197654786703084034666161925592077028","3483935379473814311568403882584618033","294738521687177347725322636960694545866","297826124093152051293934672899438079972","281862923389554968372265393270399722394","62974227349063624411227773961605879417","93963723901511549293488993216268983506","231028700041455946828447064618287196859","260569685306144753962126433374889246638","148680224386796033859555027419395162108","112013498600749201821136965951206001614","335032846454881980913587494582698759136","8703148476488176790689186853578804658","182090903656551506886810809397654177553","287169040821687888752004428073695464935","320291198884946294719854312279608313189","96996022058774364700428677075011058698","282009380803113223580426652348950961295","23236652717559399366935613685656121186","335826797165307151868919367371062784498","199715511164679596992907220606081530898","297957275217243293462544458984077268883","50070800931080661747934507050862729751","240539539116184891661979433538607037332","307896470139864350932037805451509587084","290901384569081471153337626658582564539","49021088105564292484894637124613124275","226524337459516650730150965792934738291","276954983593064816772079825069479593409","14541576342585926832489132384129424400","242009363064922555672195511038790975265","275624798311827781145091760887125305439","154501720164942770135456940195743883069","27622071337855797023792284685424873635","58268033497656537754932527336847596168","281288132762964780582683138379570925938","329671008604014950968538283247458326080","157167814651156386396037167112246606162","265925626480425365410537601225024081611","263170458245429725595973047158306356128","185451631791523606578363674324362516087","76148285476778012796557393437687448240","236217050128577008438033778529323912006","39997868061594014423020676272977525345","271088251073727209684246102367737566914","225563527087861278099095005922855261001","195587842362566968153726383347258455214","58974717981077665390017256369800538871","272782494787388925905964860166658570744","292154423252471697875383905141671015578","76220645192660919233887844478710092809","297384085895463024071204627621657852820","32859931376309593720153266008360642926","165899813447932949713247348652359766331","289053874279051859895105851924896208993","134106192187062619118006129903057587167","30688967514702500679644639882444795977","154471066228576356171675444732950502169","289551228954735262115081093652478825130","11011655050963303835838273535532148392","183447075115999047485376773683114656352","309321534047263890035484295327156830106","317054670414580523527415965769149632278","27246003320231274390463608517703464275","120638703342273817338749362303659125830","328185851323718319193379498367268826276","330771275249239791492490704113987753362","205160301296739955262432342377375577583","100894353520013554288572936074092814041","76668540491888950660186681239685412945","16288925779559245263052751735694160956","338388143264674777301726370560552599830","322389504026388707579891671326435862593","64474619244574381562207516916809454055","32021336975260932883368843467981559806","120512799928874738902182400466070094164","54619548649361068371182232116556683287","11712251289203850235465749490060706581","114399691054574619436776578170534190816","187007340708482758826679405646363331183","316689058194244941376166665479835884345","1201255816555745383481368026599943712","82589718060877065363461347228999042823","319628671791782425655614684721220301060","140031268120941490714702135086591293621","44660888489142842619596587326853691106","249830176487059980266621658502188504894","246620143595705376194000271395363843270","42143616078179180291548202098165474175","105273685598477720881910719462818116691","331470059016575342264091567865021342737","338865133497334630115443639854497465746","117588275554297924816588322059702881796","71053583537499640957983023598630577882","323805155944333772455430371507340972448","160469323103636480062498231653516555965","232998938913669433474720846337398455853","5542785121225576306061811582314830344","315493624842359409480348407475851119999","313695894227770348280839669199542659249","197110542397787849460204251632827170031","241846682965137475775096937439168197909","295683900184589824307865512997404726840","213029142857952506742288523970725805284","27105609862552818618623098305465083100","54428401013298310025976948391707856840","148686864374725652206977591328519808755","122025050272011641773541695234430028119","307226712203188853414885556004511971751","57503972535713659428028424301702921645","160641481037869889699596773531226128298","236905415850418900577808731374004538724","69012399775820091757050228441558275119","122506153978746991996840642465162710208","268495303171532316680290056551486732550","199181086177865962606442733785040411426","89184263697291378218076700951352640624","77190986346065414184757952078950754208","3593697842140409335848940953259863139","178691927259932381653986460809271486735","260437256507612349067686653102712268937","86369968192130613022989794887747157766","160860819389122783963516229381146659708","336434152007957924531102140824737028737","69498135678787743901614554967297631346","179082675083584484097933596409897734715","150791520353751127814264328665317591182","77600670539266402082909773866465264416","47697399386402041402723943814270104831","55115243297889669077633949440115807085","337974623851986167054738065723618145426","227335394356098830539099452886437156250","90031128396518781303548282884639145409","47235404885170559648442382019457885340","9068087224822005486140485354528208258"],"threshold":0.9},"source":"https://github.com/python/cpython/commit/39258d3595300bc7b952854c915f63ae2d4b9c3e"},{"signature_type":"Function","id":"CVE-2024-5642-80634b5c","signature_version":"v1","deprecated":false,"target":{"function":"SSL_CTX_get_default_passwd_cb","file":"Modules/_ssl.c"},"digest":{"function_hash":"314064046608492504139295511372986087630","length":87},"source":"https://github.com/python/cpython/commit/39258d3595300bc7b952854c915f63ae2d4b9c3e"},{"signature_type":"Function","id":"CVE-2024-5642-841acbb4","signature_version":"v1","deprecated":false,"target":{"function":"context_traverse","file":"Modules/_ssl.c"},"digest":{"function_hash":"198415657948525713516811388721724846509","length":185},"source":"https://github.com/python/cpython/commit/39258d3595300bc7b952854c915f63ae2d4b9c3e"},{"signature_type":"Function","id":"CVE-2024-5642-8e6b6725","signature_version":"v1","deprecated":false,"target":{"function":"_ssl_thread_id_function","file":"Modules/_ssl.c"},"digest":{"function_hash":"334438545041200102697883819273740369158","length":66},"source":"https://github.com/python/cpython/commit/39258d3595300bc7b952854c915f63ae2d4b9c3e"},{"signature_type":"Function","id":"CVE-2024-5642-95f7265e","signature_version":"v1","deprecated":false,"target":{"function":"_ssl__SSLContext_impl","file":"Modules/_ssl.c"},"digest":{"function_hash":"289000997225558100377677085588776230039","length":4095},"source":"https://github.com/python/cpython/commit/39258d3595300bc7b952854c915f63ae2d4b9c3e"},{"signature_type":"Function","id":"CVE-2024-5642-96cf5cce","signature_version":"v1","deprecated":false,"target":{"function":"HMAC_CTX_free","file":"Modules/_hashopenssl.c"},"digest":{"function_hash":"336296461685157124323791762640436369089","length":103},"source":"https://github.com/python/cpython/commit/39258d3595300bc7b952854c915f63ae2d4b9c3e"},{"signature_type":"Function","id":"CVE-2024-5642-a33c029b","signature_version":"v1","deprecated":false,"target":{"function":"_selectNPN_cb","file":"Modules/_ssl.c"},"digest":{"function_hash":"93329855390881997494928241384310746017","length":305},"source":"https://github.com/python/cpython/commit/39258d3595300bc7b952854c915f63ae2d4b9c3e"},{"signature_type":"Function","id":"CVE-2024-5642-a5441cc1","signature_version":"v1","deprecated":false,"target":{"function":"BIO_up_ref","file":"Modules/_ssl.c"},"digest":{"function_hash":"436307874845677676952301007191375314","length":113},"source":"https://github.com/python/cpython/commit/39258d3595300bc7b952854c915f63ae2d4b9c3e"},{"signature_type":"Function","id":"CVE-2024-5642-a6c117fc","signature_version":"v1","deprecated":false,"target":{"function":"PySSL_set_session","file":"Modules/_ssl.c"},"digest":{"function_hash":"43397771326617211912756858231522210770","length":998},"source":"https://github.com/python/cpython/commit/39258d3595300bc7b952854c915f63ae2d4b9c3e"},{"signature_type":"Function","id":"CVE-2024-5642-b0729822","signature_version":"v1","deprecated":false,"target":{"function":"_ssl__SSLContext__set_alpn_protocols_impl","file":"Modules/_ssl.c"},"digest":{"function_hash":"24804064154360980914692370686712030635","length":811},"source":"https://github.com/python/cpython/commit/39258d3595300bc7b952854c915f63ae2d4b9c3e"},{"signature_type":"Function","id":"CVE-2024-5642-b12e035b","signature_version":"v1","deprecated":false,"target":{"function":"cipher_to_dict","file":"Modules/_ssl.c"},"digest":{"function_hash":"275180226492860695763104537801520970444","length":1253},"source":"https://github.com/python/cpython/commit/39258d3595300bc7b952854c915f63ae2d4b9c3e"},{"signature_type":"Function","id":"CVE-2024-5642-bab38311","signature_version":"v1","deprecated":false,"target":{"function":"COMP_get_type","file":"Modules/_ssl.c"},"digest":{"function_hash":"235322893127747691887830105117456529398","length":72},"source":"https://github.com/python/cpython/commit/39258d3595300bc7b952854c915f63ae2d4b9c3e"},{"signature_type":"Function","id":"CVE-2024-5642-c06bdd07","signature_version":"v1","deprecated":false,"target":{"function":"SSL_SESSION_get_ticket_lifetime_hint","file":"Modules/_ssl.c"},"digest":{"function_hash":"106221545869412287705581950934370676098","length":102},"source":"https://github.com/python/cpython/commit/39258d3595300bc7b952854c915f63ae2d4b9c3e"},{"signature_type":"Function","id":"CVE-2024-5642-cc3753ad","signature_version":"v1","deprecated":false,"target":{"function":"HMAC_CTX_get_md","file":"Modules/_hashopenssl.c"},"digest":{"function_hash":"30102976636415428057069796188364784153","length":71},"source":"https://github.com/python/cpython/commit/39258d3595300bc7b952854c915f63ae2d4b9c3e"},{"signature_type":"Function","id":"CVE-2024-5642-dc09d167","signature_version":"v1","deprecated":false,"target":{"function":"sslmodule_legacy","file":"Modules/_ssl.c"},"digest":{"function_hash":"42299948622976487003934720693342838966","length":263},"source":"https://github.com/python/cpython/commit/39258d3595300bc7b952854c915f63ae2d4b9c3e"},{"signature_type":"Function","id":"CVE-2024-5642-e01eb9d3","signature_version":"v1","deprecated":false,"target":{"function":"X509_STORE_get0_objects","file":"Modules/_ssl.c"},"digest":{"function_hash":"292470922109690113203821050536404828816","length":53},"source":"https://github.com/python/cpython/commit/39258d3595300bc7b952854c915f63ae2d4b9c3e"},{"signature_type":"Function","id":"CVE-2024-5642-e7a4af57","signature_version":"v1","deprecated":false,"target":{"function":"set_sni_callback","file":"Modules/_ssl.c"},"digest":{"function_hash":"83556046334309137294286001637764497345","length":906},"source":"https://github.com/python/cpython/commit/39258d3595300bc7b952854c915f63ae2d4b9c3e"},{"signature_type":"Line","id":"CVE-2024-5642-f20852fc","signature_version":"v1","deprecated":false,"target":{"file":"Modules/_ssl/debughelpers.c"},"digest":{"line_hashes":["97903173135471256159523560576455898909","152421551581063500694314051360403970614","220166457407516710165965080989462466307","220017459282509427550701920561308519246","284623282869587949040261229419233300052"],"threshold":0.9},"source":"https://github.com/python/cpython/commit/39258d3595300bc7b952854c915f63ae2d4b9c3e"},{"signature_type":"Function","id":"CVE-2024-5642-fa3d907f","signature_version":"v1","deprecated":false,"target":{"function":"_ssl__SSLContext__set_npn_protocols","file":"Modules/clinic/_ssl.c.h"},"digest":{"function_hash":"280428029759707136888201857432627222751","length":408},"source":"https://github.com/python/cpython/commit/39258d3595300bc7b952854c915f63ae2d4b9c3e"}],"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-5642.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L"}]}