Astra Linux – vulnerability in python3.11, python3.7

When folding a long comment into an email header containing only unfoldable characters, the parentheses would be lost. This can be exploited to inject headers into email messages where addresses are user-controlled and not sanitized...

Astra Linux – vulnerability in python3.7, python2.7

In Python aka CPython up to 3.10.8, the mailcap module does not add escape characters to commands found in the system mailcap file. This may allow attackers to inject shell commands into applications that call mailcap.findmatch with untrusted input if they lack validation of user-provided filenam...

Astra Linux – Vulnerabilities in Python 2.7, Python 3.11, Python 3.7

When constructing nested elements using XMLDom.minidom methods like appendChild, which rely on clearidcache, the algorithm has a quadratic complexity. This can affect the availability of documents when they are constructed with excessively nested structures...

Astra Linux – vulnerability in python3.11, python3.7

When given a user-controlled command, the imaplib module can inject additional commands via newline characters. Mitigation rejects commands containing control characters...

Astra Linux – vulnerability in python2.7, python3.7

The urllib.parse.urlsplit and urlparse functions improperly validate bracketed hosts , allowing hosts that are not IPv6 or IPvFuture. This behavior does not comply with RFC 3986 and may enable SSRF if a URL is processed by multiple URL parsers...

Astra Linux – vulnerability in python3.11

When reading an HTTP response from a server, if no read amount is specified, the default behavior is to use Content-Length. This allows a malicious server to cause the client to read large amounts of data into memory, potentially leading to an Out-of-Memory OOM condition or other types of...

Astra Linux – Vulnerability in Python-Werkzeug

Werkzeug is a comprehensive WSGI web application library. Browsers may allow “nameless” cookies that look like =value instead of key=value. A vulnerable browser may allow a compromised application on a neighboring subdomain to exploit this to set a cookie like =Host-test=bad for another subdomain...

Astra Linux – Vulnerability in Python 3.7, PHP 7.3

The Keccak XKCP SHA-3 reference implementation, prior to the update of fdc6fef, has an integer overflow and resulting buffer overflow issue. This vulnerability allows attackers to execute arbitrary code or compromise the expected cryptographic properties of the algorithm. This issue occurs within...

Astra Linux – vulnerability in python-git

GitPython versions prior to 3.1.60 fail to properly validate the git directory path, enabling attackers to impersonate the git directory by using tracked files such as gitdir, commondir, and HEAD. Attackers can execute arbitrary code by placing a malicious pre-commit hook in the tracked hooks...

Astra Linux – vulnerability in python2.7, pypy

In Python 3.x versions prior to 3.5.10, 3.6.x prior to 3.6.12, 3.7.x prior to 3.7.9, and 3.8.x prior to 3.8.5, CRLF injection is possible if the attacker controls the HTTP request method; this was demonstrated by inserting CR and LF control characters into the first argument of...

Astra Linux – vulnerability in python2.7, pypy

In Lib/tarfile.py within Python up to version 3.8.3, an attacker can craft a TAR archive that results in an infinite loop when opened by tarfile.open, as procpax fails to validate the header...

Astra Linux – Vulnerability in python-urllib3

The urllib3 library before version 1.24.2 in Python mishandles certain cases where the desired set of CA certificates differs from the CA certificates stored in the operating system’s store. As a result, SSL connections succeed in situations where a verification failure would be the correct...

Astra Linux – Vulnerability in Python-Django

A issue was discovered in Django 2.2 before 2.2.16, 3.0 before 3.0.10, and 3.1 before 3.1.1 when Python 3.7+ was used. The intermediate-level directories of the filesystem cache had the system’s standard umask instead of 0o077...

Astra Linux – Vulnerability in python-tornado

Tornado is a Python web framework and asynchronous networking library. In versions 6.5.2 and earlier, a single maliciously crafted HTTP request could block the server’s event loop for an extended period, due to the use of the HTTPHeaders.add method. This method accumulates values using string...

Astra Linux – vulnerability in python-git

GitPython versions prior to 3.1.53 fail to properly escape section names in git config files, enabling attackers to inject arbitrary configuration directives via malicious submodule names. Attackers can insert core.sshCommand or other dangerous config keys into the victim’s .git/config using...

Astra Linux – Vulnerability in python-git

GitPython is a Python library used to interact with Git repositories. Prior to version 3.1.49, GitConfigParser.setvalue passed values to Python’s configparser without validating for newlines. GitPython’s own write method converts embedded newlines into indented continuation lines e.g., \n becomes...

Astra Linux – vulnerability in python-git

GitPython versions prior to 3.1.59 fail to disable mergeincludes when parsing .gitmodules, enabling attackers to reveal local file contents by including arbitrary file paths via include directives. Attackers can craft a malicious .gitmodules file containing include directives referencing sensitiv...

Astra Linux – vulnerability in lxml

Lxml is a library for processing XML and HTML in Python. Prior to version 6.1.0, using either of the two parsers with the default configuration with resolveentities=True allowed untrusted XML input to read local files. Setting the resolveentities option explicitly to resolveentities='internal' or...

Astra Linux – vulnerability in python-tornado

Tornado is a Python web framework and asynchronous networking library. In versions of Tornado prior to 6.5.5, the only limit on the number of parts in multipart/form-data was the maxbodysize setting default 100MB. Since parsing occurs synchronously on the main thread, this creates the possibility...

Astra Linux – Vulnerability in Python 3.7

The readints function in plistlib.py in Python from version 3.9.1 is vulnerable to a potential Distributed Denial-of-Service DoS attack due to CPU and RAM exhaustion when processing malformed Apple Property List files in binary format...