PYSEC-2017-96

The tlslite library before 0.4.9 for Python allows remote attackers to trigger a denial of service runtime exception and process crash...

python: Heap overflow in zipimporter module

A vulnerability was discovered in Python, in the built-in zipimporter. A specially crafted zip file placed in a module path such that it would be loaded by a later "import" statement could cause a heap overflow, leading to arbitrary code execution...

Code injection

Unspecified vulnerability in the MySQL Connector component 2.1.3 and earlier and 2.0.4 and earlier in Oracle MySQL allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Connector/Python...

Internet Bug Bounty: chain.__setstate__ Type Confusion

Python 3.5.2 suffers from a type confusion vulnerability in the chain.setstate method of the itertools module. The issue exists due to lack of argument validation in the chainsetstate function: static PyObject chainsetstatechainobject lz, PyObject state PyObject source, active=NULL; if !...

DEBIAN-CVE-2016-5699

CRLF injection vulnerability in the HTTPConnection.putheader function in urllib2 and urllib in CPython aka Python before 2.7.10 and 3.x before 3.4.4 allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in a URL...

EUVD-2016-6641

CRLF injection vulnerability in the HTTPConnection.putheader function in urllib2 and urllib in CPython aka Python before 2.7.10 and 3.x before 3.4.4 allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in a URL...

PSF-2016-8 HTTP header injection

CRLF injection vulnerability in the HTTPConnection.putheader function in urllib2 and urllib in CPython aka Python before 2.7.10 and 3.x before 3.4.4 allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in a URL...

SOL75004031 - Python vulnerability CVE-2016-1000110

Vulnerability Recommended Actions None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents SOL4602: Overview of the F5 security vulnerability response policy SOL4918: Overview of the F5...

UBUNTU-CVE-2016-1000110

The CGIHandler class in Python before 2.7.12 does not protect against the HTTPPROXY variable name clash in a CGI script, which could allow a remote attacker to redirect HTTP requests...

Vulnerability of Python software, which allows a malicious actor to compromise the confidentiality of protected information

In Python, integer overflow allows access to memory contents, provided that larger size and offset values are passed as arguments to the buffer type...

Vulnerability of Python software, which allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information

The vulnerability exists in the Python CGIHTTPServer module due to incorrect handling of URL-encoded path separators. Exploiting this vulnerability allows attackers to obtain the original CGI script code or execute any CGI script in the server’s web directory...

CVE-2013-7440

The ssl.matchhostname function in CPython aka Python before 2.7.9 and 3.x before 3.3.3 does not properly handle wildcards in hostnames, which might allow man-in-the-middle attackers to spoof servers via a crafted certificate...

PSF-2016-1 ssl.match_hostname() IDNA issue

The ssl.matchhostname function in CPython aka Python before 2.7.9 and 3.x before 3.3.3 does not properly handle wildcards in hostnames, which might allow man-in-the-middle attackers to spoof servers via a crafted certificate...

Python 3.4 / 3.5 xmlparse_setattro() Type Confusion Vulnerability

Python versions 3.4 and 3.5 suffer from a vulnerability caused by the behavior of the xmlparsesetattro function. When called, the function uses the provided name argument in several conditional statements which assume that the name argument is a string. However, if a name argument is provided tha...

Python 3.5 product_setstate() Out-Of-Bounds Read

Title: Python 3.3 - 3.5 productsetstate Out-of-bounds Read Credit: John Leitch [email protected], Bryce Darling [email protected] Url1: http://autosectools.com/Page/Python-productsetstate-Out-of-bounds-Read Url2: http://bugs.python.org/issue25021 Resolution: Fixed Python 3.3 - 3.5 suffer...

Python 3.4 / 3.5 xmlparse_setattro() Type Confusion

Title: Python 3.4 and 3.5 xmlparsesetattro Type Confusion Credit: John Leitch [email protected], Bryce Darling [email protected] Url1: http://autosectools.com/Page/Python-xmlparsesetattro-Type-Confusion Url2: http://bugs.python.org/issue25019 Resolution: Fixed Python 3.4 and 3.5 suffer...

CVE-2015-5652

CVE-2015-5652 : Untrusted search path vulnerability in Python for Windows (through 3.5.0) allows local privilege escalation via a Trojan horse readline.pyd in the current working directory. Root cause: insecure DLL search path loading of readline.pyd. Impact: arbitrary code execution with the pri...

Python 'ssl.match_hostname()' function security restriction bypass vulnerability

Python is an object-oriented, straightforward computer programming language. Python has a security restriction bypass vulnerability in the 'ssl.matchhostname' function. An attacker could exploit the vulnerability to bypass certain target security restrictions and perform unauthorized operations...

The vulnerability of the SUSE Linux Enterprise operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the rpm-python package in the SUSE Linux Enterprise operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

F5 Networks BIG-IP : Python vulnerability (K16398)

Buffer overflow in the repr function in Python 2.3 through 2.6 before 20060822 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via crafted wide character UTF-32/UCS-4 strings to certain scripts. CVE-2006-4980 Impact An attacker may be able to...