Lucene search

K
cvelistRedhatCVELIST:CVE-2018-1061
HistoryJun 19, 2018 - 12:00 p.m.

CVE-2018-1061

2018-06-1912:00:00
CWE-20
redhat
www.cve.org
2

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

8.5 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

79.2%

python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in the difflib.IS_LINE_JUNK method. An attacker could use this flaw to cause denial of service.

CNA Affected

[
  {
    "product": "python",
    "vendor": "[UNKNOWN]",
    "versions": [
      {
        "status": "affected",
        "version": "python 2.7.15"
      },
      {
        "status": "affected",
        "version": "python 3.4.9"
      },
      {
        "status": "affected",
        "version": "python 3.5.6"
      },
      {
        "status": "affected",
        "version": "python 3.7.0"
      }
    ]
  }
]

References

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

8.5 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

79.2%