Astra Linux – vulnerability in python3.11, python3.7

When given a user-controlled command, the poplib module can inject additional commands via newline characters. Mitigation rejects commands containing control characters...

Astra Linux – Vulnerability in Mako

Mako is a template library written in Python. Prior to version 1.3.11, the TemplateLookup.gettemplate function was vulnerable to path traversal attacks when the URI started with // e.g., //../../../secret.txt. The root cause of this issue was an inconsistency between two implementations of path...

Astra Linux – Vulnerability in Python-Django

A issue was discovered in Django 2.2 before 2.2.16, 3.0 before 3.0.10, and 3.1 before 3.1.1 when Python 3.7+ was used. The intermediate-level directories of the filesystem cache had the system’s standard umask instead of 0o077...

Astra Linux – Vulnerability in Python 3.7, PHP 7.3

The Keccak XKCP SHA-3 reference implementation, prior to the update of fdc6fef, has an integer overflow and resulting buffer overflow issue. This vulnerability allows attackers to execute arbitrary code or compromise the expected cryptographic properties of the algorithm. This issue occurs within...

Astra Linux – Vulnerabilities in Python 2.7, Python 3.11, Python 3.7

When constructing nested elements using XMLDom.minidom methods like appendChild, which rely on clearidcache, the algorithm has a quadratic complexity. This can affect the availability of documents when they are constructed with excessively nested structures...

Astra Linux – Vulnerability in Python-Django

An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30. MultiPartParser allows remote attackers to degrade performance by submitting multipart uploads with Content-Transfer-Encoding: base64, including excessive whitespace. Earlier, unsupported Django versions such a...

Astra Linux – vulnerability in python-django, python2.7

Packages python/cpython versions 0 through 3.6.13, 3.7.0 through 3.7.10, 3.8.0 through 3.8.8, and 3.9.0 through 3.9.2 are vulnerable to Web Cache Poisoning via urllib.parse.parseqsl and urllib.parse.parseqs. This vulnerability exploits a technique known as “parameter cloaking.” When an attacker i...

Astra Linux – Vulnerability in Pypy

In the http.cookiejar.py module of Python, prior to version 3.7.3, the domain validation mechanism was not properly implemented. This vulnerability could allow existing cookies to be sent to the wrong server. Attackers could exploit this flaw by using a server whose hostname contains another vali...

Astra Linux – Vulnerability in python-git

GitPython before version 3.1.54 contains an incomplete list of denylists in the unsafegitcloneoptions function, which omits the --template option. This allows attackers to execute arbitrary commands during cloning operations. Attackers can specify --template to point to a directory containing...

Astra Linux – Vulnerability in python-git

GitPython versions before 3.1.54 contain a vulnerability where an arbitrary file overwrite is possible, due to a flaw in the Diffable.diff method. This method fails to validate git options passed through thekwargs parameter. Attackers can provide the --output argument via another parameter, or us...

Astra Linux – Vulnerability in python-git

GitPython before version 3.1.51 contains an incomplete command injection blocklist, which fails to account for Git’s feature of abbreviating long-option names. Attackers can bypass the safety measures by using abbreviated option names, such as “uploadp” instead of “uploadpack”. Git will then trea...

Astra Linux – vulnerability in python-git

GitPython versions prior to 3.1.59 fail to disable mergeincludes when parsing .gitmodules, enabling attackers to reveal local file contents by including arbitrary file paths via include directives. Attackers can craft a malicious .gitmodules file containing include directives referencing sensitiv...

Astra Linux – vulnerability in lxml

Lxml is a library for processing XML and HTML in Python. Prior to version 6.1.0, using either of the two parsers with the default configuration with resolveentities=True allowed untrusted XML input to read local files. Setting the resolveentities option explicitly to resolveentities='internal' or...

Astra Linux - vulnerability in pillow

In Pillow versions prior to 9.0.0, PIL.ImageMath.eval enables evaluation of arbitrary expressions—including those that utilize the Python exec method. A lambda expression can also be used...

Astra Linux – Vulnerability in python-git

GitPython before version 3.1.55 fails to disable environment variable expansion in Remote.create and Submodule.add URL handling, allowing attackers to exfiltrate secrets by providing URLs that contain variable references. Attackers can create URLs with environment variable tokens that are expande...

Astra Linux – Vulnerability in python-git

GitPython is a Python library used to interact with Git repositories. Prior to version 3.1.49, GitConfigParser.setvalue passed values to Python’s configparser without validating for newlines. GitPython’s own write method converts embedded newlines into indented continuation lines e.g., \n becomes...

Astra Linux – Vulnerability in python-git

GitPython is a Python library used for interacting with Git repositories. From version 3.1.30 to before version 3.1.47, GitPython automatically blocked dangerous Git options such as --upload-pack and --receive-pack. However, the corresponding Python functions uploadpack and receivepack bypassed...

Astra Linux – Vulnerability in python-git

GitPython versions before 3.1.54 contain a remote code execution vulnerability in the checkunsafeoptions guard, which can be bypassed by introducing Git options into single-character kwarg values. Attackers can provide crafted option dictionaries to methods such as clonefrom, fetch, pull, push,...

Astra Linux – vulnerability in python-git

GitPython versions prior to 3.1.50 fail to validate newline characters in the section parameter of configwriter, enabling attackers to inject arbitrary section headers into .git/config. By inserting newlines, attackers can craft a forged core section with hooksPath pointing to directories under...

Astra Linux – Vulnerability in python-ipaddress

The Lib/ipaddress.py module in Python up to version 3.8.3 incorrectly calculates hash values for the IPv4Interface and IPv6Interface classes. This may allow a remote attacker to cause a denial of service if an application relies on the performance of a dictionary containing IPv4Interface or...