Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
osvGoogleOSV:CVE-2018-14647
HistorySep 25, 2018 - 12:29 a.m.

CVE-2018-14647

2018-09-2500:29:00
Google
osv.dev
12

AI Score

8.4

Confidence

High

EPSS

0.006

Percentile

79.3%

JSON

Python’s elementtree C accelerator failed to initialise Expat’s hash salt during initialization. This could make it easy to conduct denial of service attacks against Expat by constructing an XML document that would cause pathological hash collisions in Expat’s internal data structures, consuming large amounts CPU and RAM. The vulnerability exists in Python versions 3.7.0, 3.6.0 through 3.6.6, 3.5.0 through 3.5.6, 3.4.0 through 3.4.9, 2.7.0 through 2.7.15.

References

Related

prion 1
openvas 53
nvd 1
fedora 28
ibm 9
cve 1
nessus 60
veracode 1
debiancve 1
hackerone 1
ubuntucve 1
amazon 3
redhatcve 1
osv 8
alpinelinux 1
cvelist 1
suse 2
slackware 1
mageia 2
photon 7
redhat 6
debian 4
cloudfoundry 1
ubuntu 3
centos 1
oraclelinux 1
prion
prion
Code injection
2018-09-25 00:29:00
openvas
openvas
Python 2.7.x < 2.7.16, 3.4.x < 3.4.10, 3.5.x < 3.5.7, 3.6.x < 3.6.7, 3.7.0 Python Issue (bpo-34623) - Linux
2021-10-04 00:00:00
Fedora Update for python35 FEDORA-2018-7689556ab2
2018-10-26 00:00:00
Fedora Update for python35 FEDORA-2018-ac14dbf3fd
2019-05-07 00:00:00
nvd
nvd
CVE-2018-14647
2018-09-25 00:29:00
fedora
fedora
[SECURITY] Fedora 29 Update: python36-3.6.8-1.fc29
2019-01-18 02:14:44
[SECURITY] Fedora 28 Update: python3-3.6.7-2.fc28
2018-11-29 02:28:14
[SECURITY] Fedora 28 Update: python37-3.7.1-1.fc28
2018-11-13 02:28:19
ibm
ibm
Security Bulletin: Vulnerability in Python affects Watson Machine Learning Services (CVE-2018-14647)
2019-07-23 18:55:01
Security Bulletin: IBM BladeCenter Advanced Management Module (AMM) is affected by vulnerability in python (CVE-2018-14647)
2019-04-11 22:55:01
Security Bulletin: A Security Vulnerability affects IBM Cloud Private - Python
2019-03-12 22:45:01
cve
cve
CVE-2018-14647
2018-09-25 00:29:00
nessus
nessus
Fedora 27 : python26 (2018-14526cbebe)
2018-10-26 00:00:00
Photon OS 1.0: Python2 PHSA-2019-1.0-0203
2019-02-07 00:00:00
Fedora 29 : python3 (2018-9860917db0)
2019-01-03 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-05-27 00:40:17
debiancve
debiancve
CVE-2018-14647
2018-09-25 00:29:00
hackerone
hackerone
Internet Bug Bounty: XML hash collision DoS vulnerability in Python's xml.etree module
2018-09-22 06:36:27
ubuntucve
ubuntucve
CVE-2018-14647
2018-09-24 00:00:00
amazon
amazon
Medium: python3
2018-12-17 19:14:00
Medium: python34, python36
2018-12-20 00:01:00
Medium: python35
2018-11-05 21:47:00
redhatcve
redhatcve
CVE-2018-14647
2020-04-02 08:14:30
osv
osv
_elementree C accelerator doesn't call XML_SetHashSalt()
2018-09-25 00:00:00
python3.4 - security update
2019-06-24 00:00:00
python3.5 - security update
2018-09-28 00:00:00
alpinelinux
alpinelinux
CVE-2018-14647
2018-09-25 00:29:00
cvelist
cvelist
CVE-2018-14647
2018-09-25 00:00:00
suse
suse
Security update for python (important)
2019-03-06 00:00:00
Security update for python3 (important)
2020-01-21 00:00:00
slackware
slackware
[slackware-security] python
2019-03-03 22:46:15
mageia
mageia
Updated python packages fix security vulnerabilities
2019-01-01 01:42:09
Updated python3 packages fix security vulnerability
2019-04-11 00:25:19
photon
photon
Important Photon OS Security Update - PHSA-2019-0120
2019-01-10 00:00:00
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2019-2.0-0120
2019-01-10 00:00:00
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2019-2.0-0118
2019-01-07 00:00:00
redhat
redhat
(RHSA-2020:1462) Moderate: python security update
2020-04-14 14:34:05
(RHSA-2019:2030) Moderate: python security and bug fix update
2019-08-06 07:52:47
(RHSA-2020:1346) Moderate: python security update
2020-04-07 08:31:07
debian
debian
[SECURITY] [DSA 4307-1] python3.5 security update
2018-09-28 19:17:56
[SECURITY] [DLA 1835-1] python3.4 security update
2019-06-25 03:40:34
[SECURITY] [DSA 4306-1] python2.7 security update
2018-09-27 21:05:32
cloudfoundry
cloudfoundry
USN-3817-1: Python vulnerabilities | Cloud Foundry
2018-11-20 00:00:00
ubuntu
ubuntu
Python vulnerabilities
2018-11-15 00:00:00
Python vulnerabilities
2018-11-13 00:00:00
Python vulnerabilities
2024-07-11 00:00:00
centos
centos
python, tkinter security update
2019-08-30 04:00:52
oraclelinux
oraclelinux
python security and bug fix update
2019-08-13 00:00:00

AI Score

8.4

Confidence

High

EPSS

0.006

Percentile

79.3%

JSON
Related for OSV:CVE-2018-14647
prion1openvas53nvd1fedora28ibm9cve1nessus60veracode1debiancve1hackerone1ubuntucve1amazon3redhatcve1osv8alpinelinux1cvelist1suse2slackware1mageia2photon7redhat6debian4cloudfoundry1ubuntu3centos1oraclelinux1