193 matches found
EulerOS 2.0 SP10 : python3 (EulerOS-SA-2022-2144)
According to the versions of the python3 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In Python aka CPython through 3.10.4, the mailcap module does not add escape characters into commands discovered in the system mailcap file. Th...
CLSA-2022-1658347999 Fixed CVE-2015-20170 in python3
CVE-2015-20170: mailcap: findmatch function does not sanitise the second argument allowing to inject shell commands...
CLSA-2022-1658347744 Fixed CVE-2015-20107 in python2-7.module_el8.5.0+2070+77770ab7.tuxcare.els2
CVE-2015-20107: mailcap: findmatch function does not sanitise the second argument allowing to inject shell commands...
CLSA-2022-1658347647 Fixed CVE-2015-20170 in python3
CVE-2015-20170: mailcap: findmatch function does not sanitise the second argument allowing to inject shell commands...
CLSA-2022-1658347450 Fixed CVE-2015-20170 in python2-4.module_el8.4.0+2071+0b56c8de.tuxcare.els3
CVE-2015-20170: mailcap: findmatch function does not sanitise the second argument allowing to inject shell commands...
Fixed CVE-2015-20170 in python
CVE-2015-20170: mailcap: findmatch function does not sanitise the second argument allowing to inject shell commands...
CLSA-2022-1658347112 Fixed CVE-2015-20170 in python
CVE-2015-20170: mailcap: findmatch function does not sanitise the second argument allowing to inject shell commands...
CLSA-2022-1658346878 Fixed CVE-2015-20170 in python
CVE-2015-20170: mailcap: findmatch function does not sanitise the second argument allowing to inject shell commands...
CLSA-2022-1658346794 Fix CVE(s): CVE-2015-20107
SECURITY UPDATE: Injection vulnerability - debian/patches/CVE-2015-20107.patch: Make mailcap refuse to match unsafe filenames/types/param in Lib/mailcap.py. - CVE-2015-20107...
CLSA-2022-1658346144 Fix CVE(s): CVE-2015-20107
SECURITY UPDATE: Injection vulnerability - debian/patches/CVE-2015-20107.patch: Make mailcap refuse to match unsafe filenames/types/param in Lib/mailcap.py. - CVE-2015-20107...
Command Injection
python is vulnerable to command injection. The vulnerability exist due to mailcap module does not add escape characters into commands discovered in the system mailcap file. This may allow attackers to inject shell commands into applications that call mailcap.findmatch with untrusted input...
EulerOS Virtualization 2.10.1 : python3 (EulerOS-SA-2022-2119)
According to the versions of the python3 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In Python aka CPython through 3.10.4, the mailcap module does not add escape characters into commands discovered in the system...
Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS : Python vulnerability (USN-5519-1)
The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5519-1 advisory. It was discovered that Python incorrectly handled certain inputs. An attacker could possibly use this issue to execute arbitra...
SUSE-SU-2022:2357-2 Security update for python3
This update for python3 fixes the following issues: - CVE-2015-20107: avoid command injection in the mailcap module bsc1198511...
SUSE: Security Advisory (SUSE-SU-2022:2344-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP9 : python3 (EulerOS-SA-2022-2008)
According to the versions of the python3 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In Python aka CPython through 3.10.4, the mailcap module does not add escape characters into commands discovered in the system mailcap file. Th...
Huawei EulerOS: Security Advisory for python3 (EulerOS-SA-2022-2008)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP9 : python3 (EulerOS-SA-2022-1978)
According to the versions of the python3 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In Python aka CPython through 3.10.4, the mailcap module does not add escape characters into commands discovered in the system mailcap file. Th...
SUSE: Security Advisory (SUSE-SU-2022:2249-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...