Описание
python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in the difflib.IS_LINE_JUNK method. An attacker could use this flaw to cause denial of service.
A flaw was found in the way catastrophic backtracking was implemented in python's difflib.IS_LINE_JUNK method. An attacker could use this flaw to cause denial of service.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 5 | python | Will not fix | ||
| Red Hat Enterprise Linux 6 | python | Will not fix | ||
| Red Hat Software Collections | rh-python34-python | Will not fix | ||
| Red Hat Software Collections | rh-python35-python | Will not fix | ||
| Red Hat Enterprise Linux 7 | python | Fixed | RHSA-2018:3041 | 30.10.2018 |
| Red Hat Enterprise Linux 7.4 Advanced Update Support | python | Fixed | RHSA-2020:1346 | 07.04.2020 |
| Red Hat Enterprise Linux 7.4 Telco Extended Update Support | python | Fixed | RHSA-2020:1346 | 07.04.2020 |
| Red Hat Enterprise Linux 7.4 Update Services for SAP Solutions | python | Fixed | RHSA-2020:1346 | 07.04.2020 |
| Red Hat Enterprise Linux 7.5 Extended Update Support | python | Fixed | RHSA-2020:1268 | 01.04.2020 |
| Red Hat Software Collections for Red Hat Enterprise Linux 6 | python27-python | Fixed | RHSA-2019:1260 | 22.05.2019 |
Показывать по
Дополнительная информация
Статус:
EPSS
6.5 Medium
CVSS3
Связанные уязвимости
python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in the difflib.IS_LINE_JUNK method. An attacker could use this flaw to cause denial of service.
python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in the difflib.IS_LINE_JUNK method. An attacker could use this flaw to cause denial of service.
python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is ...
python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in the difflib.IS_LINE_JUNK method. An attacker could use this flaw to cause denial of service.
Уязвимость метода difflib.IS_LINE_JUNK интерпретатора языка программирования Python, позволяющая нарушителю вызвать отказ в обслуживании
EPSS
6.5 Medium
CVSS3