CVE-2019-9674

2020-02-0415:15:11

Debian Security Bug Tracker

security-tracker.debian.org

0.013 Low

EPSS

Percentile

85.9%

JSON

Lib/zipfile.py in Python through 3.7.2 allows remote attackers to cause a denial of service (resource consumption) via a ZIP bomb.

OSVersionArchitecturePackageVersionFilename
Debian11allpython2.7<= 2.7.18-8+deb11u1python2.7_2.7.18-8+deb11u1_all.deb
Debian10allpython2.7<= 2.7.16-2+deb10u1python2.7_2.7.16-2+deb10u1_all.deb
Debian10allpython3.7<= 3.7.3-2+deb10u3python3.7_3.7.3-2+deb10u3_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	11	all	python2.7	<= 2.7.18-8+deb11u1	python2.7_2.7.18-8+deb11u1_all.deb
Debian	10	all	python2.7	<= 2.7.16-2+deb10u1	python2.7_2.7.16-2+deb10u1_all.deb
Debian	10	all	python3.7	<= 3.7.3-2+deb10u3	python3.7_3.7.3-2+deb10u3_all.deb