Lucene search
CloudLinuxCLSA-2021:1632401716HistorySep 23, 2021 - 12:55 p.m.
Fix of CVE: CVE-2018-20852, CVE-2020-8492, CVE-2020-26116, CVE-2020-27619
2021-09-2312:55:16
repo.cloudlinux.com
47
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
- Add Oracle Linux distribution in platform.py
- CVE-2018-20852: Prefix dot in domain for proper subdomain validation
- CVE-2020-8492: Python allows an HTTP server to conduct Regular Expression Denial of Service (ReDoS) attacks against a client
- CVE-2020-26116: http.client allows CRLF injection if the attacker controls the HTTP request method
- CVE-2020-27619: Unsafe use of eval() on data retrieved via HTTP in the test suite
Related
cloudlinux
cloudlinux
Fix of CVE: CVE-2020-26116, CVE-2020-8492, CVE-2018-20852, CVE-2020-27619
2021-10-05 14:07:59
nessus
nessus
EulerOS Virtualization 3.0.6.6 : python (EulerOS-SA-2021-1512)
2021-03-04 00:00:00
EulerOS 2.0 SP3 : python (EulerOS-SA-2021-1114)
2021-01-20 00:00:00
Amazon Linux 2 : python (ALAS-2020-1432)
2020-06-04 00:00:00
amazon
amazon
Medium: python
2020-06-01 22:38:00
Medium: python3
2021-06-16 20:37:00
Important: python3
2023-10-25 21:40:00
ibm
ibm
archlinux
archlinux
[ASA-202103-27] python2: multiple issues
2021-03-25 00:00:00
osv
osv
python2.7, python3.7, python3.8 vulnerabilities
2021-03-12 14:07:56
python2.7 - security update
2019-08-31 00:00:00
CVE-2020-27619
2020-10-22 03:16:31
ubuntu
ubuntu
Python vulnerabilities
2021-03-12 00:00:00
Python vulnerability
2020-10-14 00:00:00
oraclelinux
oraclelinux
python3 security update
2021-05-25 00:00:00
python security update
2019-12-20 00:00:00
python security update
2019-12-13 00:00:00
redhat
redhat
(RHSA-2021:1633) Moderate: python3 security update
2021-05-18 05:42:46
(RHSA-2021:3366) Moderate: python3 security update
2021-08-31 08:21:02
almalinux
almalinux
Moderate: python3 security update
2021-05-18 05:42:46
suse
suse
Security update for python3 (important)
2020-12-26 00:00:00
Security update for python3 (important)
2020-12-26 00:00:00
Security update for python (moderate)
2019-08-23 00:00:00
redhatcve
redhatcve
openvas
openvas
Debian LTS: Security Advisory for python2.7 (DLA-1906-1)
2019-09-01 00:00:00
Huawei EulerOS: Security Advisory for python (EulerOS-SA-2019-2259)
2020-01-23 00:00:00
openSUSE: Security Advisory for python (openSUSE-SU-2019:1989-1)
2020-01-09 00:00:00
debian
debian
[SECURITY] [DLA 1889-1] python3.4 security update
2019-08-17 17:55:32
[SECURITY] [DLA 1906-1] python2.7 security update
2019-08-31 21:23:20
veracode
veracode
Information Disclosure
2019-11-07 00:19:06
Information Disclosure
2021-02-26 02:10:49
CRLF Injection
2020-10-18 01:59:16
debiancve
debiancve
cve
cve
prion
prion
Design/Logic Flaw
2020-10-22 03:16:00
Design/Logic Flaw
2019-07-13 21:15:00
Crlf injection
2020-09-27 04:15:00
gentoo
gentoo
GNAT Ada Suite: Remote Code Execution
2024-02-03 00:00:00
Python: Denial of service
2020-05-14 00:00:00
ubuntucve
ubuntucve
mageia
mageia
Updated python3 packages fix security vulnerability
2020-12-29 14:57:17
Updated python packages fix security vulnerability
2021-07-10 15:56:54
Updated python and python3 packages fix security vulnerabilities
2020-12-08 13:40:32
paloalto
paloalto
Informational: Impact of Python Test Suite Vulnerability CVE-2020-27619
2021-02-10 17:00:00
cbl_mariner
cbl_mariner
CVE-2020-27619 affecting package python3 3.7.9-4
2020-11-30 19:30:53
CVE-2020-26116 affecting package python3 3.7.7-2
2021-07-08 21:56:42
fedora
fedora
[SECURITY] Fedora 32 Update: mingw-python3-3.8.3-7.fc32
2020-11-17 01:14:12
[SECURITY] Fedora 31 Update: python38-3.8.3-1.fc31
2020-05-29 02:27:10
[SECURITY] Fedora 31 Update: python2-2.7.18-6.fc31
2020-10-30 01:15:15
f5
f5
K000133759 : Python vulnerability CVE-2020-26116
2023-05-08 00:00:00
photon
photon
freebsd
freebsd
tauthon -- Regular Expression Denial of Service
2020-01-30 00:00:00
Python -- Regular Expression DoS attack against client
2019-11-17 00:00:00
cloudfoundry
cloudfoundry
USN-4581-1: Python vulnerability | Cloud Foundry
2020-11-19 00:00:00
hackerone
hackerone
Ruby: 'net/http': HTTP Header Injection in the set_content_type method
2021-04-19 09:25:39
alpinelinux
alpinelinux
CVE-2020-8492
2020-01-30 19:15:00
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
Related for CLSA-2021:1632401716