Search CVE reports
71 – 80 of 96 results
Some fixes available 5 of 8
python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in the difflib.IS_LINE_JUNK method. An attacker could use this flaw to cause denial of service.
5 affected packages
python3.4, python3.5, python2.7, python3.6, python3.7
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|
| python3.4 | Not in release | Not in release | Not in release | Not in release |
| python3.5 | Not in release | Not in release | Not in release | Not in release |
| python2.7 | Not in release | Not affected | Not affected | Not affected |
| python3.6 | Not in release | Not in release | Not in release | Not affected |
| python3.7 | Not in release | Not in release | Not in release | Not affected |
Some fixes available 5 of 8
python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in pop3lib's apop() method. An attacker could use this flaw to cause denial of service.
5 affected packages
python2.7, python3.4, python3.5, python3.6, python3.7
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|
| python2.7 | Not in release | Not affected | Not affected | Not affected |
| python3.4 | Not in release | Not in release | Not in release | Not in release |
| python3.5 | Not in release | Not in release | Not in release | Not in release |
| python3.6 | Not in release | Not in release | Not in release | Not affected |
| python3.7 | Not in release | Not in release | Not in release | Not affected |
Python Software Foundation Python (CPython) version 2.7 contains a CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in shutil module (make_archive function) that can result...
5 affected packages
python2.7, python3.4, python3.5, python3.6, python3.7
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|
| python2.7 | — | — | — | Fixed |
| python3.4 | — | — | — | Not in release |
| python3.5 | — | — | — | Not in release |
| python3.6 | — | — | — | Not affected |
| python3.7 | — | — | — | Not affected |
Python Software Foundation CPython version From 3.2 until 3.6.4 on Windows contains a Buffer Overflow vulnerability in os.symlink() function on Windows that can result in Arbitrary code execution, likely escalation of privilege....
4 affected packages
python3.4, python3.5, python3.6, python3.7
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|
| python3.4 | — | Not in release | Not in release | Not in release |
| python3.5 | — | Not in release | Not in release | Not in release |
| python3.6 | — | Not in release | Not in release | Not affected |
| python3.7 | — | Not in release | Not in release | Not affected |
Some fixes available 2 of 3
Python 2.7.14 is vulnerable to a Heap-Buffer-Overflow as well as a Heap-Use-After-Free. Python versions prior to 2.7.14 may also be vulnerable and it appears that Python 2.7.17 and prior may also be vulnerable however this has not...
7 affected packages
python2.6, python2.7, python3.2, python3.4, python3.5...
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|
| python2.6 | — | — | — | Not in release |
| python2.7 | — | — | — | Not affected |
| python3.2 | — | — | — | Not in release |
| python3.4 | — | — | — | Not in release |
| python3.5 | — | — | — | Not in release |
| python3.6 | — | — | — | Not affected |
| python3.7 | — | — | — | Not affected |
A vulnerability classified as problematic was found in Python 2.7.13. This vulnerability affects unknown code of the component pgAdmin4. The manipulation leads to uncontrolled search path. The attack can be initiated remotely. The...
9 affected packages
python, python2.7, python3.10, python3.4, python3.5...
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|
| python | — | — | — | — |
| python2.7 | — | Not affected | Not affected | Not affected |
| python3.10 | — | Not affected | Not in release | Not in release |
| python3.4 | — | Not in release | Not in release | Not in release |
| python3.5 | — | Not in release | Not in release | Not in release |
| python3.6 | — | Not in release | Not in release | Not affected |
| python3.7 | — | Not in release | Not in release | Not affected |
| python3.8 | — | Not in release | Not affected | Not affected |
| python3.9 | — | Not in release | Not affected | Not in release |
The Wave_read._read_fmt_chunk function in Lib/wave.py in Python through 3.6.4 does not ensure a nonzero channel value, which allows attackers to cause a denial of service (divide-by-zero and exception) via a crafted wav format...
5 affected packages
python2.7, python3.5, python3.4, python3.6, python3.7
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|
| python2.7 | — | Ignored | Ignored | Ignored |
| python3.5 | — | Not in release | Not in release | Not in release |
| python3.4 | — | Not in release | Not in release | Not in release |
| python3.6 | — | Not in release | Not in release | Ignored |
| python3.7 | — | Not in release | Not in release | Ignored |
Lib/webbrowser.py in Python through 3.6.3 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted...
8 affected packages
jython, python2.6, python2.7, python3.2, python3.4...
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|
| jython | — | Not affected | Not affected | Not affected |
| python2.6 | — | Not in release | Not in release | Not in release |
| python2.7 | — | Not affected | Not affected | Not affected |
| python3.2 | — | Not in release | Not in release | Not in release |
| python3.4 | — | Not in release | Not in release | Not in release |
| python3.5 | — | Not in release | Not in release | Not in release |
| python3.6 | — | Not in release | Not in release | Not affected |
| python3.7 | — | Not in release | Not in release | Not affected |
CPython (aka Python) up to 2.7.13 is vulnerable to an integer overflow in the PyString_DecodeEscape function in stringobject.c, resulting in heap-based buffer overflow (and possible arbitrary code execution)
5 affected packages
python2.7, python3.4, python3.5, python3.6, python3.7
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|
| python2.7 | — | Not affected | Not affected | Not affected |
| python3.4 | — | Not in release | Not in release | Not in release |
| python3.5 | — | Not in release | Not in release | Not in release |
| python3.6 | — | Not in release | Not in release | Not affected |
| python3.7 | — | Not in release | Not in release | Not affected |
Some fixes available 4 of 5
CRLF injection vulnerability in the HTTPConnection.putheader function in urllib2 and urllib in CPython (aka Python) before 2.7.10 and 3.x before 3.4.4 allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in a URL.
4 affected packages
python3.4, python3.2, python2.7, python3.5
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|
| python3.4 | — | Not in release | Not in release | Not in release |
| python3.2 | — | Not in release | Not in release | Not in release |
| python2.7 | — | Not affected | Not affected | Not affected |
| python3.5 | — | Not in release | Not in release | Not in release |