serf

• Author: kikadf
• Vulnerable: 1.2.1-1
• Unaffected: 1.2.1-2arcturus1

Ben Reser discovered that serf did not correctly handle SSL certificates with NUL bytes in the CommonName or SubjectAltNames fields.

CVEs:

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3504