Описание
python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in pop3lib's apop() method. An attacker could use this flaw to cause denial of service.
A flaw was found in the way catastrophic backtracking was implemented in python's pop3lib's apop() method. An attacker could use this flaw to cause denial of service.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 5 | python | Will not fix | ||
| Red Hat Enterprise Linux 6 | python | Will not fix | ||
| Red Hat Software Collections | rh-python34-python | Will not fix | ||
| Red Hat Software Collections | rh-python35-python | Fix deferred | ||
| Red Hat Enterprise Linux 7 | python | Fixed | RHSA-2018:3041 | 30.10.2018 |
| Red Hat Enterprise Linux 7.4 Advanced Update Support | python | Fixed | RHSA-2020:1346 | 07.04.2020 |
| Red Hat Enterprise Linux 7.4 Telco Extended Update Support | python | Fixed | RHSA-2020:1346 | 07.04.2020 |
| Red Hat Enterprise Linux 7.4 Update Services for SAP Solutions | python | Fixed | RHSA-2020:1346 | 07.04.2020 |
| Red Hat Enterprise Linux 7.5 Extended Update Support | python | Fixed | RHSA-2020:1268 | 01.04.2020 |
| Red Hat Software Collections for Red Hat Enterprise Linux 6 | python27-python | Fixed | RHSA-2019:1260 | 22.05.2019 |
Показывать по
Дополнительная информация
Статус:
4.3 Medium
CVSS3
Связанные уязвимости
python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in pop3lib's apop() method. An attacker could use this flaw to cause denial of service.
python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in pop3lib's apop() method. An attacker could use this flaw to cause denial of service.
python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is ...
python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in pop3lib's apop() method. An attacker could use this flaw to cause denial of service.
Уязвимость метода pop3lib apop() интерпретатора языка программирования Python, позволяющая нарушителю вызвать отказ в обслуживании
4.3 Medium
CVSS3