Skip to content
Fencer Intel
medium 6.8

CVE-2013-4073 json

The OpenSSL::SSL.verify_certificate_identity function in lib/openssl/ssl.rb in Ruby 1.8 before 1.8.7-p374, 1.9 before 1.9.3-p448, and 2.0 b…

published 2013-08-18 13 y ago modified 2026-06-16 4 mo ago also EUVD-2013-4004

cvss
6.8
version 2.0, NVD
cisa kev
Not listed
not in CISA's catalog
epss
2.8%
EPSS 2.8% chance of exploitation in 30 days, percentile 86%
public exploits
0
none known

Summary

The OpenSSL::SSL.verify_certificate_identity function in lib/openssl/ssl.rb in Ruby 1.8 before 1.8.7-p374, 1.9 before 1.9.3-p448, and 2.0 before 2.0.0-p247 does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.

Patch / fix

  • ruby RHEL 5 1.8.5-31.el5_9
  • ruby RHEL 6 1.8.7.352-12.el6_4
  • ruby-ri RHEL 5 1.8.5-31.el5_9
  • ruby-ri RHEL 6 1.8.7.352-12.el6_4
  • ruby-irb RHEL 5 1.8.5-31.el5_9
  • ruby-irb RHEL 6 1.8.7.352-12.el6_4
  • ruby-libs RHEL 5 1.8.5-31.el5_9
  • ruby-libs RHEL 6 1.8.7.352-12.el6_4

red hat advisories RHSA-2013:1090RHSA-2013:1137RHSA-2013:1103

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2013-4073 updated cvss 4.3

ruby: hostname check bypassing vulnerability in SSL client

  • Red Hat JBoss SOA Platform 4 jruby jruby Red Hat JBoss SOA Platform 5 jruby jruby
    affected: no fix planned “Will not fix”
  • Red Hat Software Collections ruby193-ruby, ruby193-ruby-irb, ruby193-rubygems, ruby193-ruby-libs, ruby193-ruby-tcltk, ruby193-rubygem-json, +5 more Red Hat Subscription Asset Manager ruby193-ruby
    affected: no fix available
  • Red Hat Enterprise Linux (v. 5 server) ruby 1.8.5-31.el5_9, ruby-ri 1.8.5-31.el5_9, ruby-irb 1.8.5-31.el5_9, ruby-libs 1.8.5-31.el5_9, ruby-mode 1.8.5-31.el5_9, ruby-rdoc 1.8.5-31.el5_9, +1 more Red Hat Enterprise Linux Desktop (v. 6) ruby 1.8.7.352-12.el6_4, ruby-irb 1.8.7.352-12.el6_4, ruby-libs 1.8.7.352-12.el6_4, ruby-rdoc 1.8.7.352-12.el6_4 Red Hat Enterprise Linux Desktop Optional (v. 6) ruby 1.8.7.352-12.el6_4, ruby-ri 1.8.7.352-12.el6_4, ruby-tcltk 1.8.7.352-12.el6_4 Red Hat Enterprise Linux HPC Node (v. 6) ruby 1.8.7.352-12.el6_4, ruby-irb 1.8.7.352-12.el6_4, ruby-libs 1.8.7.352-12.el6_4, ruby-rdoc 1.8.7.352-12.el6_4 Red Hat Enterprise Linux HPC Node Optional (v. 6) ruby 1.8.7.352-12.el6_4, ruby-ri 1.8.7.352-12.el6_4, ruby-tcltk 1.8.7.352-12.el6_4
    fixed: vendor fix RHSA-2013:1090
  • Red Hat Enterprise Linux OpenStack Platform 3.0 ruby193-ruby 1.9.3.429-34.2.el6ost, ruby193-ruby-irb 1.9.3.429-34.2.el6ost, ruby193-rubygem-json 1.5.5-34.2.el6ost, ruby193-ruby-libs 1.9.3.429-34.2.el6ost, ruby193-ruby-tcltk 1.9.3.429-34.2.el6ost, ruby193-rubygem-rake 0.9.2.2-34.2.el6ost, +3 more
    fixed: vendor fix RHSA-2013:1103
  • Red Hat Enterprise Linux Server (v. 6) ruby 1.8.7.352-12.el6_4, ruby-irb 1.8.7.352-12.el6_4, ruby-libs 1.8.7.352-12.el6_4, ruby-rdoc 1.8.7.352-12.el6_4 Red Hat Enterprise Linux Server Optional (v. 6) ruby 1.8.7.352-12.el6_4, ruby-ri 1.8.7.352-12.el6_4, ruby-tcltk 1.8.7.352-12.el6_4 Red Hat Enterprise Linux Workstation (v. 6) ruby 1.8.7.352-12.el6_4, ruby-irb 1.8.7.352-12.el6_4, ruby-libs 1.8.7.352-12.el6_4, ruby-rdoc 1.8.7.352-12.el6_4 Red Hat Enterprise Linux Workstation Optional (v. 6) ruby 1.8.7.352-12.el6_4, ruby-ri 1.8.7.352-12.el6_4, ruby-tcltk 1.8.7.352-12.el6_4
    fixed: vendor fix RHSA-2013:1090
  • Red Hat OpenShift Enterprise Node ruby193-ruby 1.9.3.448-38.el6, ruby193-rubygems 1.8.23-38.el6, ruby193-ruby-irb 1.9.3.448-38.el6, ruby193-rubygem-json 1.5.5-38.el6, ruby193-rubygem-rdoc 3.9.5-38.el6, ruby193-ruby-libs 1.9.3.448-38.el6, +4 more Red Hat RHOSE Infrastructure 1.2 ruby193-ruby 1.9.3.448-38.el6, ruby193-rubygems 1.8.23-38.el6, ruby193-ruby-irb 1.9.3.448-38.el6, ruby193-rubygem-json 1.5.5-38.el6, ruby193-rubygem-rdoc 3.9.5-38.el6, ruby193-ruby-libs 1.9.3.448-38.el6, +4 more
    fixed: vendor fix RHSA-2013:1137
  • Red Hat Enterprise Linux 7 ruby, ruby-irb, rubygems, ruby-libs, ruby-tcltk, rubygem-json, +6 more
    not affected: vulnerable code not present

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

Exploit prediction

2.76% chance of exploitation in the next 30 days, higher than 86% of all scored CVEs (FIRST EPSS, 2026-11-09).

CVSS scores

assigned by version score vector
NVD 2.0 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P

Classification

Weakness

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.