Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2019-9674
HistoryFeb 04, 2020 - 3:15 p.m.

CVE-2019-9674

2020-02-0415:15:11
CWE-400
[email protected]
web.nvd.nist.gov
8

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.2

Confidence

High

EPSS

0.013

Percentile

85.9%

JSON

Lib/zipfile.py in Python through 3.7.2 allows remote attackers to cause a denial of service (resource consumption) via a ZIP bomb.

Affected configurations

Nvd
Node
pythonpythonRange≤3.7.2
Node
canonicalubuntu_linuxMatch12.04-
OR
canonicalubuntu_linuxMatch14.04esm
OR
canonicalubuntu_linuxMatch16.04esm
OR
canonicalubuntu_linuxMatch18.04lts
OR
canonicalubuntu_linuxMatch20.04lts
Node
netappactive_iq_unified_managerMatch-vmware_vsphere
VendorProductVersionCPE
pythonpython*cpe:2.3:a:python:python:*:*:*:*:*:*:*:*
canonicalubuntu_linux12.04cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*
canonicalubuntu_linux14.04cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*
canonicalubuntu_linux16.04cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*
canonicalubuntu_linux18.04cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
canonicalubuntu_linux20.04cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:*
netappactive_iq_unified_manager-cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*

Related

nessus 33
cvelist 1
openvas 24
cbl_mariner 2
osv 6
veracode 1
photon 9
prion 1
cve 1
debiancve 1
ubuntucve 1
f5 1
redhatcve 1
suse 2
github 1
cloudfoundry 1
ubuntu 3
mageia 1
ibm 1
rosalinux 1
ics 1
nessus
nessus
EulerOS 2.0 SP8 : python2 (EulerOS-SA-2020-1174)
2020-02-25 00:00:00
RHEL 5 : python (Unpatched Vulnerability)
2024-07-12 00:00:00
Photon OS 3.0: Python2 PHSA-2020-3.0-0057
2020-02-20 00:00:00
cvelist
cvelist
CVE-2019-9674
2020-02-04 14:05:49
openvas
openvas
Python <= 3.7.2 DoS Vulnerability (bpo-36260) - Linux
2021-09-12 00:00:00
Python <= 3.7.2 DoS Vulnerability (bpo-36260) - Mac OS X
2021-09-12 00:00:00
Huawei EulerOS: Security Advisory for python2 (EulerOS-SA-2020-1174)
2020-02-25 00:00:00
cbl_mariner
cbl_mariner
CVE-2019-9674 affecting package python2 for versions less than 2.7.18-8
2022-04-09 06:51:57
CVE-2019-9674 affecting package python2 2.7.18-14
2020-11-30 19:30:47
osv
osv
CVE-2019-9674
2020-02-04 15:15:11
Fides Webserver Vulnerable to Zip Bomb File Uploads
2023-07-18 19:22:18
python2.7, python3.7, python3.8 vulnerabilities
2021-03-12 14:07:56
veracode
veracode
Denial Of Service (DoS)
2020-09-21 06:22:36
photon
photon
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-2.0-0211
2020-02-24 00:00:00
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-2.0-0224
2020-04-03 00:00:00
Important Photon OS Security Update - PHSA-2020-0211
2020-02-24 00:00:00
prion
prion
Code injection
2020-02-04 15:15:00
cve
cve
CVE-2019-9674
2020-02-04 15:15:11
debiancve
debiancve
CVE-2019-9674
2020-02-04 15:15:11
ubuntucve
ubuntucve
CVE-2019-9674
2020-02-04 00:00:00
f5
f5
K000132333 : Python vulnerability CVE-2019-9674
2023-01-30 00:00:00
redhatcve
redhatcve
CVE-2019-9674
2020-02-07 20:44:17
suse
suse
Security update for python (moderate)
2020-05-23 00:00:00
Security update for python3 (moderate)
2020-03-01 00:00:00
github
github
Fides Webserver Vulnerable to Zip Bomb File Uploads
2023-07-18 19:22:18
cloudfoundry
cloudfoundry
USN-4428-1: Python vulnerabilities | Cloud Foundry
2020-08-27 00:00:00
ubuntu
ubuntu
Python vulnerabilities
2020-07-22 00:00:00
Python vulnerabilities
2021-03-12 00:00:00
Python vulnerabilities
2024-07-11 00:00:00
mageia
mageia
Updated python and python3 packages fix security vulnerabilities
2020-12-08 13:40:32
ibm
ibm
Security Bulletin: IBM Cloud Pak for Security is vulnerable to using components with known vulnerabilities
2022-11-01 18:28:47
rosalinux
rosalinux
Advisory ROSA-SA-2021-1957
2021-07-02 18:03:40
ics
ics
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1
2023-12-14 12:00:00

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.2

Confidence

High

EPSS

0.013

Percentile

85.9%

JSON
Related for NVD:CVE-2019-9674
nessus33cvelist1openvas24cbl_mariner2osv6veracode1photon9prion1cve1debiancve1ubuntucve1f51redhatcve1suse2github1cloudfoundry1ubuntu3mageia1ibm1rosalinux1ics1