Yüksek CVSS 7.5 PoC var
CVE-2018-1060: Python: hatalı girdi doğrulama
Açıklama (NVD)
python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in pop3lib's apop() method. An attacker could use this flaw to cause denial of service.
Özet bilgiler
- Ürün
- Python Python
- CVSS v3.1
- 7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - EPSS
- %5,04 (yüzdelik 92)
- CWE
- CWE-20
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| python-python | 2.7.0 | — | 2.7.15 |
| python-python | 3.0.0 | — | 3.4.9 |
| python-python | 3.5.0 | — | 3.5.6 |
| python-python | 3.6.0 | — | 3.6.5 |
| fedoraproject-fedora | 28 | 28 | — |
| fedoraproject-fedora | 29 | 29 | — |
| fedoraproject-fedora | 30 | 30 | — |
| canonical-ubuntu-linux | 12.04 | 12.04 | — |
| canonical-ubuntu-linux | 14.04 | 14.04 | — |
| canonical-ubuntu-linux | 16.04 | 16.04 | — |
| canonical-ubuntu-linux | 18.04 | 18.04 | — |
| redhat-ansible-tower | 3.3 | 3.3 | — |
| redhat-enterprise-linux-desktop | 7.0 | 7.0 | — |
| redhat-enterprise-linux-server | 7.0 | 7.0 | — |
| redhat-enterprise-linux-workstation | 7.0 | 7.0 | — |
| debian-debian-linux | 8.0 | 8.0 | — |
| debian-debian-linux | 9.0 | 9.0 | — |
Kaynaklar
- NVD kaydı
- lists.opensuse.org
- www.securitytracker.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- bugs.python.org
- bugzilla.redhat.com
- docs.python.org
- docs.python.org
- lists.debian.org
- lists.debian.org
- lists.fedoraproject.org
- lists.fedoraproject.org
- lists.fedoraproject.org
- support.hpe.com
- usn.ubuntu.com
- usn.ubuntu.com
- www.debian.org
- www.debian.org
- www.oracle.com
- lists.opensuse.org
- www.securitytracker.com
- CWE-20