Поиск уязвимостей
Количество 25
Количество 25
ALT-PU-2017-2501
ALT-PU-2017-2501: package `python` update to version 2.7.11-alt6
openSUSE-SU-2016:1885-1
Security update for python
SUSE-SU-2016:2859-1
Security update for python3
SUSE-SU-2016:2653-1
Security update for python3
SUSE-SU-2016:2106-1
Security update for python
openSUSE-SU-2016:2120-1
Security update for python3
SUSE-SU-2019:0223-1
Security update for python
ALT-PU-2017-2851
ALT-PU-2017-2851: package `python3` update to version 3.5.4-alt2
CVE-2016-5636
Integer overflow in the get_data function in zipimport.c in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 allows remote attackers to have unspecified impact via a negative data size value, which triggers a heap-based buffer overflow.
CVE-2016-5636
Integer overflow in the get_data function in zipimport.c in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 allows remote attackers to have unspecified impact via a negative data size value, which triggers a heap-based buffer overflow.
CVE-2016-5636
Integer overflow in the get_data function in zipimport.c in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 allows remote attackers to have unspecified impact via a negative data size value, which triggers a heap-based buffer overflow.
CVE-2016-5636
Integer overflow in the get_data function in zipimport.c in CPython (a ...
CVE-2016-0772
The smtplib library in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 does not return an error when StartTLS fails, which might allow man-in-the-middle attackers to bypass the TLS protections by leveraging a network position between the client and the registry to block the StartTLS command, aka a "StartTLS stripping attack."
CVE-2016-0772
The smtplib library in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 does not return an error when StartTLS fails, which might allow man-in-the-middle attackers to bypass the TLS protections by leveraging a network position between the client and the registry to block the StartTLS command, aka a "StartTLS stripping attack."
CVE-2016-0772
The smtplib library in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 does not return an error when StartTLS fails, which might allow man-in-the-middle attackers to bypass the TLS protections by leveraging a network position between the client and the registry to block the StartTLS command, aka a "StartTLS stripping attack."
CVE-2016-0772
The smtplib library in CPython (aka Python) before 2.7.12, 3.x before ...
openSUSE-SU-2020:0086-1
Security update for python3
SUSE-SU-2020:0114-1
Security update for python3
GHSA-f5qq-9gj3-v9hw
Integer overflow in the get_data function in zipimport.c in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 allows remote attackers to have unspecified impact via a negative data size value, which triggers a heap-based buffer overflow.
GHSA-6m57-q338-h677
The smtplib library in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 does not return an error when StartTLS fails, which might allow man-in-the-middle attackers to bypass the TLS protections by leveraging a network position between the client and the registry to block the StartTLS command, aka a "StartTLS stripping attack."
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2017-2501 ALT-PU-2017-2501: package `python` update to version 2.7.11-alt6 | CVSS3: 9.8 | около 9 лет назад | |
 | openSUSE-SU-2016:1885-1 Security update for python | больше 10 лет назад | ||
| SUSE-SU-2016:2859-1 Security update for python3 | почти 10 лет назад | ||
| SUSE-SU-2016:2653-1 Security update for python3 | около 10 лет назад | ||
| SUSE-SU-2016:2106-1 Security update for python | около 10 лет назад | ||
| openSUSE-SU-2016:2120-1 Security update for python3 | около 10 лет назад | ||
| SUSE-SU-2019:0223-1 Security update for python | почти 8 лет назад | ||
| ALT-PU-2017-2851 ALT-PU-2017-2851: package `python3` update to version 3.5.4-alt2 | CVSS3: 9.8 | почти 9 лет назад | |
 | CVE-2016-5636 Integer overflow in the get_data function in zipimport.c in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 allows remote attackers to have unspecified impact via a negative data size value, which triggers a heap-based buffer overflow. | CVSS3: 9.8 | 25% Средний | около 10 лет назад |
 | CVE-2016-5636 Integer overflow in the get_data function in zipimport.c in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 allows remote attackers to have unspecified impact via a negative data size value, which triggers a heap-based buffer overflow. | CVSS3: 4.5 | 25% Средний | почти 11 лет назад |
 | CVE-2016-5636 Integer overflow in the get_data function in zipimport.c in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 allows remote attackers to have unspecified impact via a negative data size value, which triggers a heap-based buffer overflow. | CVSS3: 9.8 | 25% Средний | около 10 лет назад |
| CVE-2016-5636 Integer overflow in the get_data function in zipimport.c in CPython (a ... | CVSS3: 9.8 | 25% Средний | около 10 лет назад |
| CVE-2016-0772 The smtplib library in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 does not return an error when StartTLS fails, which might allow man-in-the-middle attackers to bypass the TLS protections by leveraging a network position between the client and the registry to block the StartTLS command, aka a "StartTLS stripping attack." | CVSS3: 6.5 | 15% Средний | около 10 лет назад |
| CVE-2016-0772 The smtplib library in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 does not return an error when StartTLS fails, which might allow man-in-the-middle attackers to bypass the TLS protections by leveraging a network position between the client and the registry to block the StartTLS command, aka a "StartTLS stripping attack." | CVSS3: 4.8 | 15% Средний | больше 10 лет назад |
| CVE-2016-0772 The smtplib library in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 does not return an error when StartTLS fails, which might allow man-in-the-middle attackers to bypass the TLS protections by leveraging a network position between the client and the registry to block the StartTLS command, aka a "StartTLS stripping attack." | CVSS3: 6.5 | 15% Средний | около 10 лет назад |
| CVE-2016-0772 The smtplib library in CPython (aka Python) before 2.7.12, 3.x before ... | CVSS3: 6.5 | 15% Средний | около 10 лет назад |
| openSUSE-SU-2020:0086-1 Security update for python3 | почти 7 лет назад | ||
| SUSE-SU-2020:0114-1 Security update for python3 | почти 7 лет назад | ||
| GHSA-f5qq-9gj3-v9hw Integer overflow in the get_data function in zipimport.c in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 allows remote attackers to have unspecified impact via a negative data size value, which triggers a heap-based buffer overflow. | CVSS3: 9.8 | 25% Средний | больше 4 лет назад |
| GHSA-6m57-q338-h677 The smtplib library in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 does not return an error when StartTLS fails, which might allow man-in-the-middle attackers to bypass the TLS protections by leveraging a network position between the client and the registry to block the StartTLS command, aka a "StartTLS stripping attack." | CVSS3: 6.5 | 15% Средний | больше 4 лет назад |
Уязвимостей на страницу