Yüksek CVSS 7.5

CVE-2018-1061: Python: hatalı girdi doğrulama

Yayın: 19 Haziran 2018 15:29 · Güncelleme: 6 Kasım 2026 09:48

Açıklama (NVD)

python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in the difflib.IS_LINE_JUNK method. An attacker could use this flaw to cause denial of service.

Özet bilgiler

Ürün: Python Python
CVSS v3.1: 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS: %4,74 (yüzdelik 92)
CWE: CWE-20
Yama: Yok / bilinmiyor

Etkilenen sürümler

Ürün	Başlangıç	Bitiş	Düzeltildi
python-python	—	—	2.7.15
python-python	3.0	—	3.4.9
python-python	3.5.0	3.5.5	—
python-python	3.6	3.6.4	—
python-python	3.7.0	3.7.0	—
python-python	3.7.0	3.7.0	—
python-python	3.7.0	3.7.0	—
python-python	3.7.0	3.7.0	—
python-python	3.7.0	3.7.0	—
python-python	3.7.0	3.7.0	—
python-python	3.7.0	3.7.0	—
python-python	3.7.0	3.7.0	—
python-python	3.7.0	3.7.0	—
python-python	3.7.0	3.7.0	—
debian-debian-linux	8.0	8.0	—
debian-debian-linux	9.0	9.0	—
redhat-ansible-tower	3.3	3.3	—
redhat-enterprise-linux-desktop	7.0	7.0	—
redhat-enterprise-linux-server	7.0	7.0	—
redhat-enterprise-linux-workstation	7.0	7.0	—
canonical-ubuntu-linux	12.04	12.04	—
canonical-ubuntu-linux	14.04	14.04	—
canonical-ubuntu-linux	16.04	16.04	—
canonical-ubuntu-linux	18.04	18.04	—
fedoraproject-fedora	28	28	—
fedoraproject-fedora	29	29	—
fedoraproject-fedora	30	30	—

Kaynaklar

Uygulamada aç Tüm CVE kayıtları