9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
6.4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
0.007 Low
EPSS
Percentile
80.4%
Issue Overview:
A security regression of CVE-2019-9636 was discovered in python, since commit d537ab0ff9767ef024f26246899728f0116b1ec3, which still allows an attacker to exploit CVE-2019-9636 by abusing the user and password parts of a URL. When an application parses user-supplied URLs to store cookies, authentication credentials, or other kind of information, it is possible for an attacker to provide specially crafted URLs to make the application locate host-related information (e.g. cookies, authentication data) and send them to a different host than where it should, unlike if the URLs had been correctly parsed. The result of an attack may vary based on the application. (CVE-2019-10160)
An issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through 3.7.3. CRLF injection is possible if the attacker controls a url parameter, as demonstrated by the first argument to urllib.request.urlopen with \r\n (specifically in the query string after a ? character) followed by an HTTP header or a Redis command. (CVE-2019-9740)
urllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for remote attackers to bypass protection mechanisms that blacklist file: URIs, as demonstrated by triggering a urllib.urlopen(‘local_file:///etc/passwd’) call. (CVE-2019-9948)
An issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through 3.7.3. CRLF injection is possible if the attacker controls a url parameter, as demonstrated by the first argument to urllib.request.urlopen with \r\n (specifically in the path component of a URL that lacks a ? character) followed by an HTTP header or a Redis command. This is similar to the CVE-2019-9740 query string issue. (CVE-2019-9947)
An issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7.x through 3.7.4. The email module wrongly parses email addresses that contain multiple @ characters. An application that uses the email module and implements some kind of checks on the From/To headers of a message could be tricked into accepting an email address that should be denied. An attack may be the same as in CVE-2019-11340; however, this CVE applies to Python more generally. (CVE-2019-16056)
Python 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode Encoding (with an incorrect netloc) during NFKC normalization. The impact is: Information disclosure (credentials, cookies, etc. that are cached against a given hostname). The components are: urllib.parse.urlsplit, urllib.parse.urlparse. The attack vector is: A specially crafted URL could be incorrectly parsed to locate cookies or authentication data and send that information to a different host than when parsed correctly. (CVE-2019-9636)
Affected Packages:
python34
Issue Correction:
Run yum update python34 to update your system.
New Packages:
i686:
python34-devel-3.4.10-1.49.amzn1.i686
python34-test-3.4.10-1.49.amzn1.i686
python34-3.4.10-1.49.amzn1.i686
python34-debuginfo-3.4.10-1.49.amzn1.i686
python34-libs-3.4.10-1.49.amzn1.i686
python34-tools-3.4.10-1.49.amzn1.i686
src:
python34-3.4.10-1.49.amzn1.src
x86_64:
python34-debuginfo-3.4.10-1.49.amzn1.x86_64
python34-test-3.4.10-1.49.amzn1.x86_64
python34-devel-3.4.10-1.49.amzn1.x86_64
python34-libs-3.4.10-1.49.amzn1.x86_64
python34-tools-3.4.10-1.49.amzn1.x86_64
python34-3.4.10-1.49.amzn1.x86_64
Red Hat: CVE-2019-10160, CVE-2019-16056, CVE-2019-9636, CVE-2019-9740, CVE-2019-9947, CVE-2019-9948
Mitre: CVE-2019-10160, CVE-2019-16056, CVE-2019-9636, CVE-2019-9740, CVE-2019-9947, CVE-2019-9948
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Amazon Linux | 1 | i686 | python34-devel | < 3.4.10-1.49.amzn1 | python34-devel-3.4.10-1.49.amzn1.i686.rpm |
Amazon Linux | 1 | i686 | python34-test | < 3.4.10-1.49.amzn1 | python34-test-3.4.10-1.49.amzn1.i686.rpm |
Amazon Linux | 1 | i686 | python34 | < 3.4.10-1.49.amzn1 | python34-3.4.10-1.49.amzn1.i686.rpm |
Amazon Linux | 1 | i686 | python34-debuginfo | < 3.4.10-1.49.amzn1 | python34-debuginfo-3.4.10-1.49.amzn1.i686.rpm |
Amazon Linux | 1 | i686 | python34-libs | < 3.4.10-1.49.amzn1 | python34-libs-3.4.10-1.49.amzn1.i686.rpm |
Amazon Linux | 1 | i686 | python34-tools | < 3.4.10-1.49.amzn1 | python34-tools-3.4.10-1.49.amzn1.i686.rpm |
Amazon Linux | 1 | x86_64 | python34-debuginfo | < 3.4.10-1.49.amzn1 | python34-debuginfo-3.4.10-1.49.amzn1.x86_64.rpm |
Amazon Linux | 1 | x86_64 | python34-test | < 3.4.10-1.49.amzn1 | python34-test-3.4.10-1.49.amzn1.x86_64.rpm |
Amazon Linux | 1 | x86_64 | python34-devel | < 3.4.10-1.49.amzn1 | python34-devel-3.4.10-1.49.amzn1.x86_64.rpm |
Amazon Linux | 1 | x86_64 | python34-libs | < 3.4.10-1.49.amzn1 | python34-libs-3.4.10-1.49.amzn1.x86_64.rpm |
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
6.4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
0.007 Low
EPSS
Percentile
80.4%