Python: Pycurl SSL Disabled

[porcupineyhairs]

Query PR

github/codeql#16812

Language

Python

CVE(s) ID list

CVE-2023-0509

CWE

CWE-295

Report

Pycurl is a library which provides curl binding in python. The original library is partially modelled in codeql. This PR adds support to test for SSL certificate validation when using pycurl.

The query aims to detect the vulnerable pattern found in CVE-2023-0509.

curl.setopt(pycurl.SSL_VERIFYPEER, 0)
curl.setopt(pycurl.SSL_VERIFYHOST,0)

There are many more detections I have found through MRVA. I will keeps updating this issue as and when they convert to CVE's.

in the meantime, the database for the original CVE can be downloaded from the below links.

https://file.io/VAqVTWYqYIf1
https://filetransfer.io/manage-package/5CmMEURU

Are you planning to discuss this vulnerability submission publicly? (Blog Post, social networks, etc).

• Yes
• No

Blog post link

No response

[ghsecuritylab]

Your submission is now in status Query review.

For information, the evaluation workflow is the following:
Initial triage > Test run > Results analysis > Query review > Final decision > Pay > Closed

[xcorail]

Created Hackerone report 2805051 for bounty 633289 : [835] Python: Pycurl SSL Disabled

[xcorail]

Hey @porcupineyhairs don't forget to claim your reward, the program is shutting down soon!

[porcupineyhairs]

@xcorail I think I am having an issue claiming the rewards. For some reason, H1 errors out if I try to claim the bounty. I have already raised a ticket with H1 regarding this last week. I am waiting for a resolution now. I will let you know as soon as that changes.