Read the docs
TI-2013-03557 Aliases CVE-2013-4073GHSA-3gpq-xx45-4rr9

The OpenSSL::SSL.verify_certificate_identity function in lib/openssl/ssl.rb in Ruby 1.8…

Priority LOW 35CWE-310Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
—
Confidentiality · integrity · availability
Partial · Partial · Partial
Fix status
Partial Red Hat: 12 fixed, 4 without a fix

Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat.

Summary

The OpenSSL::SSL.verify_certificate_identity function in lib/openssl/ssl.rb in Ruby 1.8 before 1.8.7-p374, 1.9 before 1.9.3-p448, and 2.0 before 2.0.0-p247 does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.

Why it matters now

EPSS 0.02757 86th percentileScored 2026-11-07
Fix Partial Red Hat: 3 advisoriesRed Hat: 12 fixed, 4 without a fix

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 42

CPEVersionsRoleVendor
cpe:2.3:a:ruby-lang:ruby:1.8.6-26:*:*:*:*:*:*:*1.8.6-26Vulnerableruby
cpe:2.3:a:ruby-lang:ruby:1.8.7:*:*:*:*:*:*:*1.8.7Vulnerableruby
cpe:2.3:a:ruby-lang:ruby:1.8.7:p160:*:*:*:*:*:*1.8.7 p160Vulnerableruby
cpe:2.3:a:ruby-lang:ruby:1.8.7:p17:*:*:*:*:*:*1.8.7 p17Vulnerableruby
cpe:2.3:a:ruby-lang:ruby:1.8.7:p173:*:*:*:*:*:*1.8.7 p173Vulnerableruby
cpe:2.3:a:ruby-lang:ruby:1.8.7:p174:*:*:*:*:*:*1.8.7 p174Vulnerableruby
cpe:2.3:a:ruby-lang:ruby:1.8.7:p22:*:*:*:*:*:*1.8.7 p22Vulnerableruby
cpe:2.3:a:ruby-lang:ruby:1.8.7:p248:*:*:*:*:*:*1.8.7 p248Vulnerableruby
cpe:2.3:a:ruby-lang:ruby:1.8.7:p249:*:*:*:*:*:*1.8.7 p249Vulnerableruby
cpe:2.3:a:ruby-lang:ruby:1.8.7:p299:*:*:*:*:*:*1.8.7 p299Vulnerableruby
  • cpe:2.3:a:ruby-lang:ruby:1.8.6-26:*:*:*:*:*:*:* Versions 1.8.6-26 Vulnerable ·ruby
  • cpe:2.3:a:ruby-lang:ruby:1.8.7:*:*:*:*:*:*:* Versions 1.8.7 Vulnerable ·ruby
  • cpe:2.3:a:ruby-lang:ruby:1.8.7:p160:*:*:*:*:*:* Versions 1.8.7 p160 Vulnerable ·ruby
  • cpe:2.3:a:ruby-lang:ruby:1.8.7:p17:*:*:*:*:*:* Versions 1.8.7 p17 Vulnerable ·ruby
  • cpe:2.3:a:ruby-lang:ruby:1.8.7:p173:*:*:*:*:*:* Versions 1.8.7 p173 Vulnerable ·ruby
  • cpe:2.3:a:ruby-lang:ruby:1.8.7:p174:*:*:*:*:*:* Versions 1.8.7 p174 Vulnerable ·ruby
  • cpe:2.3:a:ruby-lang:ruby:1.8.7:p22:*:*:*:*:*:* Versions 1.8.7 p22 Vulnerable ·ruby
  • cpe:2.3:a:ruby-lang:ruby:1.8.7:p248:*:*:*:*:*:* Versions 1.8.7 p248 Vulnerable ·ruby
  • cpe:2.3:a:ruby-lang:ruby:1.8.7:p249:*:*:*:*:*:* Versions 1.8.7 p249 Vulnerable ·ruby
  • cpe:2.3:a:ruby-lang:ruby:1.8.7:p299:*:*:*:*:*:* Versions 1.8.7 p299 Vulnerable ·ruby
Show 32 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:ruby-lang:ruby:1.8.7:p301:*:*:*:*:*:*1.8.7 p301Vulnerableruby
cpe:2.3:a:ruby-lang:ruby:1.8.7:p302:*:*:*:*:*:*1.8.7 p302Vulnerableruby
cpe:2.3:a:ruby-lang:ruby:1.8.7:p330:*:*:*:*:*:*1.8.7 p330Vulnerableruby
cpe:2.3:a:ruby-lang:ruby:1.8.7:p334:*:*:*:*:*:*1.8.7 p334Vulnerableruby
cpe:2.3:a:ruby-lang:ruby:1.8.7:p352:*:*:*:*:*:*1.8.7 p352Vulnerableruby
cpe:2.3:a:ruby-lang:ruby:1.8.7:p357:*:*:*:*:*:*1.8.7 p357Vulnerableruby
cpe:2.3:a:ruby-lang:ruby:1.8.7:p358:*:*:*:*:*:*1.8.7 p358Vulnerableruby
cpe:2.3:a:ruby-lang:ruby:1.8.7:p370:*:*:*:*:*:*1.8.7 p370Vulnerableruby
cpe:2.3:a:ruby-lang:ruby:1.8.7:p371:*:*:*:*:*:*1.8.7 p371Vulnerableruby
cpe:2.3:a:ruby-lang:ruby:1.8.7:p373:*:*:*:*:*:*1.8.7 p373Vulnerableruby
cpe:2.3:a:ruby-lang:ruby:1.8.7:p71:*:*:*:*:*:*1.8.7 p71Vulnerableruby
cpe:2.3:a:ruby-lang:ruby:1.8.7:p72:*:*:*:*:*:*1.8.7 p72Vulnerableruby
cpe:2.3:a:ruby-lang:ruby:1.8.7:preview1:*:*:*:*:*:*1.8.7 preview1Vulnerableruby
cpe:2.3:a:ruby-lang:ruby:1.8.7:preview2:*:*:*:*:*:*1.8.7 preview2Vulnerableruby
cpe:2.3:a:ruby-lang:ruby:1.8.7:preview3:*:*:*:*:*:*1.8.7 preview3Vulnerableruby
cpe:2.3:a:ruby-lang:ruby:1.8.7:preview4:*:*:*:*:*:*1.8.7 preview4Vulnerableruby
cpe:2.3:a:ruby-lang:ruby:1.9.3:*:*:*:*:*:*:*1.9.3Vulnerableruby
cpe:2.3:a:ruby-lang:ruby:1.9.3:p0:*:*:*:*:*:*1.9.3 p0Vulnerableruby
cpe:2.3:a:ruby-lang:ruby:1.9.3:p125:*:*:*:*:*:*1.9.3 p125Vulnerableruby
cpe:2.3:a:ruby-lang:ruby:1.9.3:p194:*:*:*:*:*:*1.9.3 p194Vulnerableruby
cpe:2.3:a:ruby-lang:ruby:1.9.3:p286:*:*:*:*:*:*1.9.3 p286Vulnerableruby
cpe:2.3:a:ruby-lang:ruby:1.9.3:p383:*:*:*:*:*:*1.9.3 p383Vulnerableruby
cpe:2.3:a:ruby-lang:ruby:1.9.3:p385:*:*:*:*:*:*1.9.3 p385Vulnerableruby
cpe:2.3:a:ruby-lang:ruby:1.9.3:p392:*:*:*:*:*:*1.9.3 p392Vulnerableruby
cpe:2.3:a:ruby-lang:ruby:1.9.3:p426:*:*:*:*:*:*1.9.3 p426Vulnerableruby
cpe:2.3:a:ruby-lang:ruby:1.9.3:p429:*:*:*:*:*:*1.9.3 p429Vulnerableruby
cpe:2.3:a:ruby-lang:ruby:2.0.0:p0:*:*:*:*:*:*2.0.0 p0Vulnerableruby
cpe:2.3:a:ruby-lang:ruby:2.0.0:p195:*:*:*:*:*:*2.0.0 p195Vulnerableruby
cpe:2.3:a:ruby-lang:ruby:2.0.0:preview1:*:*:*:*:*:*2.0.0 preview1Vulnerableruby
cpe:2.3:a:ruby-lang:ruby:2.0.0:preview2:*:*:*:*:*:*2.0.0 preview2Vulnerableruby
cpe:2.3:a:ruby-lang:ruby:2.0.0:rc1:*:*:*:*:*:*2.0.0 rc1Vulnerableruby
cpe:2.3:a:ruby-lang:ruby:2.0.0:rc2:*:*:*:*:*:*2.0.0 rc2Vulnerableruby
  • cpe:2.3:a:ruby-lang:ruby:1.8.7:p301:*:*:*:*:*:* Versions 1.8.7 p301 Vulnerable ·ruby
  • cpe:2.3:a:ruby-lang:ruby:1.8.7:p302:*:*:*:*:*:* Versions 1.8.7 p302 Vulnerable ·ruby
  • cpe:2.3:a:ruby-lang:ruby:1.8.7:p330:*:*:*:*:*:* Versions 1.8.7 p330 Vulnerable ·ruby
  • cpe:2.3:a:ruby-lang:ruby:1.8.7:p334:*:*:*:*:*:* Versions 1.8.7 p334 Vulnerable ·ruby
  • cpe:2.3:a:ruby-lang:ruby:1.8.7:p352:*:*:*:*:*:* Versions 1.8.7 p352 Vulnerable ·ruby
  • cpe:2.3:a:ruby-lang:ruby:1.8.7:p357:*:*:*:*:*:* Versions 1.8.7 p357 Vulnerable ·ruby
  • cpe:2.3:a:ruby-lang:ruby:1.8.7:p358:*:*:*:*:*:* Versions 1.8.7 p358 Vulnerable ·ruby
  • cpe:2.3:a:ruby-lang:ruby:1.8.7:p370:*:*:*:*:*:* Versions 1.8.7 p370 Vulnerable ·ruby
  • cpe:2.3:a:ruby-lang:ruby:1.8.7:p371:*:*:*:*:*:* Versions 1.8.7 p371 Vulnerable ·ruby
  • cpe:2.3:a:ruby-lang:ruby:1.8.7:p373:*:*:*:*:*:* Versions 1.8.7 p373 Vulnerable ·ruby
  • cpe:2.3:a:ruby-lang:ruby:1.8.7:p71:*:*:*:*:*:* Versions 1.8.7 p71 Vulnerable ·ruby
  • cpe:2.3:a:ruby-lang:ruby:1.8.7:p72:*:*:*:*:*:* Versions 1.8.7 p72 Vulnerable ·ruby
  • cpe:2.3:a:ruby-lang:ruby:1.8.7:preview1:*:*:*:*:*:* Versions 1.8.7 preview1 Vulnerable ·ruby
  • cpe:2.3:a:ruby-lang:ruby:1.8.7:preview2:*:*:*:*:*:* Versions 1.8.7 preview2 Vulnerable ·ruby
  • cpe:2.3:a:ruby-lang:ruby:1.8.7:preview3:*:*:*:*:*:* Versions 1.8.7 preview3 Vulnerable ·ruby
  • cpe:2.3:a:ruby-lang:ruby:1.8.7:preview4:*:*:*:*:*:* Versions 1.8.7 preview4 Vulnerable ·ruby
  • cpe:2.3:a:ruby-lang:ruby:1.9.3:*:*:*:*:*:*:* Versions 1.9.3 Vulnerable ·ruby
  • cpe:2.3:a:ruby-lang:ruby:1.9.3:p0:*:*:*:*:*:* Versions 1.9.3 p0 Vulnerable ·ruby
  • cpe:2.3:a:ruby-lang:ruby:1.9.3:p125:*:*:*:*:*:* Versions 1.9.3 p125 Vulnerable ·ruby
  • cpe:2.3:a:ruby-lang:ruby:1.9.3:p194:*:*:*:*:*:* Versions 1.9.3 p194 Vulnerable ·ruby
  • cpe:2.3:a:ruby-lang:ruby:1.9.3:p286:*:*:*:*:*:* Versions 1.9.3 p286 Vulnerable ·ruby
  • cpe:2.3:a:ruby-lang:ruby:1.9.3:p383:*:*:*:*:*:* Versions 1.9.3 p383 Vulnerable ·ruby
  • cpe:2.3:a:ruby-lang:ruby:1.9.3:p385:*:*:*:*:*:* Versions 1.9.3 p385 Vulnerable ·ruby
  • cpe:2.3:a:ruby-lang:ruby:1.9.3:p392:*:*:*:*:*:* Versions 1.9.3 p392 Vulnerable ·ruby
  • cpe:2.3:a:ruby-lang:ruby:1.9.3:p426:*:*:*:*:*:* Versions 1.9.3 p426 Vulnerable ·ruby
  • cpe:2.3:a:ruby-lang:ruby:1.9.3:p429:*:*:*:*:*:* Versions 1.9.3 p429 Vulnerable ·ruby
  • cpe:2.3:a:ruby-lang:ruby:2.0.0:p0:*:*:*:*:*:* Versions 2.0.0 p0 Vulnerable ·ruby
  • cpe:2.3:a:ruby-lang:ruby:2.0.0:p195:*:*:*:*:*:* Versions 2.0.0 p195 Vulnerable ·ruby
  • cpe:2.3:a:ruby-lang:ruby:2.0.0:preview1:*:*:*:*:*:* Versions 2.0.0 preview1 Vulnerable ·ruby
  • cpe:2.3:a:ruby-lang:ruby:2.0.0:preview2:*:*:*:*:*:* Versions 2.0.0 preview2 Vulnerable ·ruby
  • cpe:2.3:a:ruby-lang:ruby:2.0.0:rc1:*:*:*:*:*:* Versions 2.0.0 rc1 Vulnerable ·ruby
  • cpe:2.3:a:ruby-lang:ruby:2.0.0:rc2:*:*:*:*:*:* Versions 2.0.0 rc2 Vulnerable ·ruby

Remediation

Red Hat 3 advisories

  • RHSA-2013:1137 Released 2013-08-05 · Red Hat rating Moderate
    ruby193-ruby security update
    • RHOSE Infrastructure 1.2 ruby193-ruby-1.9.3.448-38.el6, ruby193-ruby-devel-1.9.3.448-38.el6, ruby193-ruby-doc-1.9.3.448-38.el6 +10
    • Red Hat OpenShift Enterprise Node ruby193-ruby-1.9.3.448-38.el6, ruby193-ruby-devel-1.9.3.448-38.el6, ruby193-ruby-doc-1.9.3.448-38.el6 +10
  • RHSA-2013:1103 Released 2013-07-23 · Red Hat rating Moderate
    ruby193-ruby security update
    • Red Hat Enterprise Linux OpenStack Platform 3.0 ruby193-ruby-1.9.3.429-34.2.el6ost, ruby193-ruby-devel-1.9.3.429-34.2.el6ost, ruby193-ruby-doc-1.9.3.429-34.2.el6ost +8
  • RHSA-2013:1090 Released 2013-07-17 · Red Hat rating Moderate
    ruby security update
    • Red Hat Enterprise Linux (v. 5 server) ruby-1.8.5-31.el5_9, ruby-1.8.5-31.el5_9.i386, ruby-1.8.5-31.el5_9.ia64 +33
    • Red Hat Enterprise Linux Desktop (v. 6) ruby-1.8.7.352-12.el6_4, ruby-devel-1.8.7.352-12.el6_4, ruby-irb-1.8.7.352-12.el6_4 +2
    • Red Hat Enterprise Linux Desktop Optional (v. 6) ruby-1.8.7.352-12.el6_4, ruby-docs-1.8.7.352-12.el6_4, ruby-ri-1.8.7.352-12.el6_4 +2
    • Red Hat Enterprise Linux HPC Node (v. 6) ruby-1.8.7.352-12.el6_4, ruby-devel-1.8.7.352-12.el6_4, ruby-irb-1.8.7.352-12.el6_4 +2
    • Red Hat Enterprise Linux HPC Node Optional (v. 6) ruby-1.8.7.352-12.el6_4, ruby-docs-1.8.7.352-12.el6_4, ruby-ri-1.8.7.352-12.el6_4 +2
    • Red Hat Enterprise Linux Server (v. 6) ruby-1.8.7.352-12.el6_4, ruby-devel-1.8.7.352-12.el6_4, ruby-devel-1.8.7.352-12.el6_4.ppc +4
    • Red Hat Enterprise Linux Server Optional (v. 6) ruby-1.8.7.352-12.el6_4, ruby-docs-1.8.7.352-12.el6_4, ruby-ri-1.8.7.352-12.el6_4 +2
    • Red Hat Enterprise Linux Workstation (v. 6) ruby-1.8.7.352-12.el6_4, ruby-devel-1.8.7.352-12.el6_4, ruby-irb-1.8.7.352-12.el6_4 +2
    • Red Hat Enterprise Linux Workstation Optional (v. 6) ruby-1.8.7.352-12.el6_4, ruby-docs-1.8.7.352-12.el6_4, ruby-ri-1.8.7.352-12.el6_4 +2

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat JBoss SOA Platform 4AffectedNo fix planned: Will not fix
Red Hat JBoss SOA Platform 5AffectedNo fix planned: Will not fix
Red Hat Software CollectionsAffectedNo fix yet
Red Hat Subscription Asset ManagerAffectedNo fix yet
RHOSE Infrastructure 1.2Fixed RHSA-2013:1137
Red Hat Enterprise Linux (v. 5 server)Fixed RHSA-2013:1090
Red Hat Enterprise Linux Desktop (v. 6)Fixed RHSA-2013:1090
Red Hat Enterprise Linux Desktop Optional (v. 6)Fixed RHSA-2013:1090
Red Hat Enterprise Linux HPC Node (v. 6)Fixed RHSA-2013:1090
Red Hat Enterprise Linux HPC Node Optional (v. 6)Fixed RHSA-2013:1090
Red Hat Enterprise Linux OpenStack Platform 3.0Fixed RHSA-2013:1103
Red Hat Enterprise Linux Server (v. 6)Fixed RHSA-2013:1090
Red Hat Enterprise Linux Server Optional (v. 6)Fixed RHSA-2013:1090
Red Hat Enterprise Linux Workstation (v. 6)Fixed RHSA-2013:1090
Red Hat Enterprise Linux Workstation Optional (v. 6)Fixed RHSA-2013:1090
Red Hat OpenShift Enterprise NodeFixed RHSA-2013:1137
Not affected: 1 product
  • Red Hat Enterprise Linux 7

Timeline

  1. 2026-10-02 Threatist record created from CVE-2013-4073
  2. 2026-10-03 Alias added: GHSA-3gpq-xx45-4rr9

References

Advisory 10

Other 4

  • TI-2026-71508 Integer overflow in GitLab allows code execution on the server KEVCVSS 3.1CRITICAL 10.0
  • TI-2017-12709 Ruby before 2.4.3 allows Net::FTP command injection. CVSS 3.0HIGH 8.8
  • TI-2008-03501 Algorithmic complexity vulnerability in the WEBrick::HTTPUtils.split_header_value… CVSS 2.0HIGH 7.8
  • TI-2021-09891 In Ruby through 3.0 on Windows, a remote attacker can submit a crafted path when a Web… CVSS 3.1HIGH 7.5
  • TI-2013-03637 Heap-based buffer overflow in Ruby 1.8, 1.9 before 1.9.3-p484, 2.0 before 2.0.0-p353, 2.1… CVSS 2.0MEDIUM 6.8
  • TI-2018-11751 An issue was discovered in the OpenSSL library in Ruby before 2.3.8, 2.4.x before 2.4.5… CVSS 3.0CRITICAL 9.8
See all 92 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences