Your submission was sent successfully! Close

Thank you for contacting us. A member of our team will be in touch shortly. Close

You have successfully unsubscribed! Close

Thank you for signing up for our newsletter!
In these regular emails you will find the latest updates about Ubuntu and upcoming events where you can meet our team.Close

Search CVE reports

Toggle filters

61 – 70 of 95 results

CVE-2018-1061

Low priority

Some fixes available 5 of 8

python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in the difflib.IS_LINE_JUNK method. An attacker could use this flaw to cause denial of service.

5 affected packages

python2.7, python3.4, python3.5, python3.6, python3.7

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
python2.7 Not in release Not affected Not affected Not affected Fixed
python3.4 Not in release Not in release Not in release Not in release Not in release
python3.5 Not in release Not in release Not in release Not in release Fixed
python3.6 Not in release Not in release Not in release Not affected Not in release
python3.7 Not in release Not in release Not in release Not affected Not in release
Show less packages

CVE-2018-1060

Low priority

Some fixes available 5 of 8

python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in pop3lib's apop() method. An attacker could use this flaw to cause denial of service.

5 affected packages

python2.7, python3.4, python3.5, python3.6, python3.7

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
python2.7 Not in release Not affected Not affected Not affected Fixed
python3.4 Not in release Not in release Not in release Not in release Not in release
python3.5 Not in release Not in release Not in release Not in release Fixed
python3.6 Not in release Not in release Not in release Not affected Not in release
python3.7 Not in release Not in release Not in release Not affected Not in release
Show less packages

CVE-2017-18207

Low priority
Ignored

** DISPUTED ** The Wave_read._read_fmt_chunk function in Lib/wave.py in Python through 3.6.4 does not ensure a nonzero channel value, which allows attackers to cause a denial of service (divide-by-zero and exception) via a crafted...

5 affected packages

python2.7, python3.4, python3.5, python3.6, python3.7

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
python2.7 — Ignored Ignored Ignored Ignored
python3.4 — Not in release Not in release Not in release Not in release
python3.5 — Not in release Not in release Not in release Ignored
python3.6 — Not in release Not in release Ignored Not in release
python3.7 — Not in release Not in release Ignored Not in release
Show less packages

CVE-2018-1000030

Low priority

Some fixes available 2 of 3

Python 2.7.14 is vulnerable to a Heap-Buffer-Overflow as well as a Heap-Use-After-Free. Python versions prior to 2.7.14 may also be vulnerable and it appears that Python 2.7.17 and prior may also be vulnerable however this has not...

7 affected packages

python2.6, python2.7, python3.2, python3.4, python3.5...

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
python2.6 — — — Not in release Not in release
python2.7 — — — Not affected Fixed
python3.2 — — — Not in release Not in release
python3.4 — — — Not in release Not in release
python3.5 — — — Not in release Not affected
python3.6 — — — Not affected Not in release
python3.7 — — — Not affected Not in release
Show all 7 packages Show less packages

CVE-2017-17522

Medium priority
Ignored

** DISPUTED ** Lib/webbrowser.py in Python through 3.6.3 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct...

8 affected packages

jython, python2.6, python2.7, python3.2, python3.4...

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
jython — Not affected Not affected Not affected Not affected
python2.6 — Not in release Not in release Not in release Not in release
python2.7 — Not affected Not affected Not affected Not affected
python3.2 — Not in release Not in release Not in release Not in release
python3.4 — Not in release Not in release Not in release Not in release
python3.5 — Not in release Not in release Not in release Not affected
python3.6 — Not in release Not in release Not affected Not in release
python3.7 — Not in release Not in release Not affected Not in release
Show all 8 packages Show less packages

CVE-2017-1000158

Medium priority
Fixed

CPython (aka Python) up to 2.7.13 is vulnerable to an integer overflow in the PyString_DecodeEscape function in stringobject.c, resulting in heap-based buffer overflow (and possible arbitrary code execution)

5 affected packages

python2.7, python3.4, python3.5, python3.6, python3.7

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
python2.7 — Not affected Not affected Not affected Fixed
python3.4 — Not in release Not in release Not in release Not in release
python3.5 — Not in release Not in release Not in release Fixed
python3.6 — Not in release Not in release Not affected Not in release
python3.7 — Not in release Not in release Not affected Not in release
Show less packages

CVE-2016-5699

Medium priority

Some fixes available 4 of 5

CRLF injection vulnerability in the HTTPConnection.putheader function in urllib2 and urllib in CPython (aka Python) before 2.7.10 and 3.x before 3.4.4 allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in a URL.

4 affected packages

python2.7, python3.2, python3.4, python3.5

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
python2.7 — Not affected Not affected Not affected Not affected
python3.2 — Not in release Not in release Not in release Not in release
python3.4 — Not in release Not in release Not in release Not in release
python3.5 — Not in release Not in release Not in release Not affected
Show less packages

CVE-2016-5636

Medium priority

Some fixes available 7 of 10

Integer overflow in the get_data function in zipimport.c in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 allows remote attackers to have unspecified impact via a negative data size value, which...

4 affected packages

python2.7, python3.2, python3.4, python3.5

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
python2.7 — Not affected Not affected Not affected Fixed
python3.2 — Not in release Not in release Not in release Not in release
python3.4 — Not in release Not in release Not in release Not in release
python3.5 — Not in release Not in release Not in release Fixed
Show less packages

CVE-2016-0772

Medium priority

Some fixes available 7 of 10

The smtplib library in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 does not return an error when StartTLS fails, which might allow man-in-the-middle attackers to bypass the TLS protections by...

4 affected packages

python2.7, python3.2, python3.4, python3.5

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
python2.7 — Not affected Not affected Not affected Fixed
python3.2 — Not in release Not in release Not in release Not in release
python3.4 — Not in release Not in release Not in release Not in release
python3.5 — Not in release Not in release Not in release Fixed
Show less packages

CVE-2016-1000110

Medium priority

Some fixes available 7 of 10

The CGIHandler class in Python before 2.7.12 does not protect against the HTTP_PROXY variable name clash in a CGI script, which could allow a remote attacker to redirect HTTP requests.

4 affected packages

python2.7, python3.2, python3.4, python3.5

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
python2.7 — Not affected Not affected Not affected Fixed
python3.2 — Not in release Not in release Not in release Not in release
python3.4 — Not in release Not in release Not in release Not in release
python3.5 — Not in release Not in release Not in release Fixed
Show less packages
  1. Previous page
  2. 5
  3. 6
  4. 7
  5. 8
  6. 9
  7. Next page
Export to JSON