Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2025-15366

Опубликовано: 20 янв. 2026
Источник: ubuntu
Приоритет: medium
EPSS Низкий

Описание

The imaplib module, when passed a user-controlled command, can have additional commands injected using newlines. Mitigation rejects commands containing control characters.

РелизСтатусПримечание
devel

DNE

esm-apps/focal

ignored

patch breaks RFC conformance
esm-apps/jammy

ignored

patch breaks RFC conformance
esm-infra-legacy/trusty

ignored

patch breaks RFC conformance
esm-infra-legacy/xenial

ignored

patch breaks RFC conformance
esm-infra/bionic

ignored

patch breaks RFC conformance
esm-infra/xenial

ignored

end of ESM support, was ignored [patch breaks RFC conformance]
jammy

ignored

patch breaks RFC conformance
noble

DNE

questing

DNE

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

ignored

patch breaks RFC conformance
noble

DNE

questing

DNE

resolute

DNE

stonking

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-apps/jammy

ignored

patch breaks RFC conformance
jammy

ignored

patch breaks RFC conformance
noble

DNE

questing

DNE

resolute

DNE

stonking

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

DNE

noble

ignored

patch breaks RFC conformance
questing

DNE

resolute

DNE

stonking

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

DNE

noble

DNE

questing

ignored

end of life, was ignored [patch breaks RFC conformance]
resolute

DNE

stonking

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

not-affected

3.14.3-1
jammy

DNE

noble

DNE

questing

ignored

end of life, was ignored [patch breaks RFC conformance]
resolute

not-affected

3.14.3-1
stonking

not-affected

3.14.3-1
upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

ignored

patch breaks RFC conformance
jammy

DNE

noble

DNE

questing

DNE

resolute

DNE

stonking

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

ignored

patch breaks RFC conformance
esm-infra-legacy/xenial

ignored

patch breaks RFC conformance
esm-infra/xenial

ignored

end of ESM support, was ignored [patch breaks RFC conformance]
jammy

DNE

noble

DNE

questing

DNE

resolute

DNE

stonking

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/bionic

ignored

patch breaks RFC conformance
jammy

DNE

noble

DNE

questing

DNE

resolute

DNE

stonking

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-apps/bionic

ignored

patch breaks RFC conformance
jammy

DNE

noble

DNE

questing

DNE

resolute

DNE

stonking

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-apps/bionic

ignored

patch breaks RFC conformance
esm-infra/focal

ignored

patch breaks RFC conformance
jammy

DNE

noble

DNE

questing

DNE

resolute

DNE

stonking

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-apps/focal

ignored

patch breaks RFC conformance
jammy

DNE

noble

DNE

questing

DNE

resolute

DNE

stonking

DNE

upstream

needs-triage

Показывать по

EPSS

Процентиль: 38%
0.00431
Низкий

Связанные уязвимости

CVSS3: 7.1
redhat
10 месяцев назад

The imaplib module, when passed a user-controlled command, can have additional commands injected using newlines. Mitigation rejects commands containing control characters.

nvd
10 месяцев назад

The imaplib module, when passed a user-controlled command, can have additional commands injected using newlines. Mitigation rejects commands containing control characters.

debian
10 месяцев назад

The imaplib module, when passed a user-controlled command, can have ad ...

github
10 месяцев назад

The imaplib module, when passed a user-controlled command, can have additional commands injected using newlines. Mitigation rejects commands containing control characters.

CVSS3: 5.5
fstec
10 месяцев назад

Уязвимость модуля imaplib интерпретатора языка программирования Python, позволяющая нарушителю нарушить выполнить произвольный код

EPSS

Процентиль: 38%
0.00431
Низкий
Уязвимость CVE-2025-15366 в Ubuntu — exploitDog