Lucene search

K
ubuntuUbuntuUSN-5342-1
HistoryMar 28, 2022 - 12:00 a.m.

Python vulnerabilities

2022-03-2800:00:00
ubuntu.com
105
ubuntu 20.04 lts
ubuntu 18.04 esm
ubuntu 16.04 esm
ubuntu 14.04 esm
python2.7
python3.4
python3.5
python3.6
python3.8
sensitive information exposure
ftp requests
arbitrary code execution
cve-2021-3426
cve-2021-4189
cve-2022-0391

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

AI Score

8

Confidence

High

EPSS

0.002

Percentile

59.5%

Releases

  • Ubuntu 20.04 LTS
  • Ubuntu 18.04 ESM
  • Ubuntu 16.04 ESM
  • Ubuntu 14.04 ESM

Packages

  • python2.7 - An interactive high-level object-oriented language
  • python3.4 - An interactive high-level object-oriented language
  • python3.5 - An interactive high-level object-oriented language
  • python3.6 - An interactive high-level object-oriented language
  • python3.8 - An interactive high-level object-oriented language

Details

David Schwörer discovered that Python incorrectly handled certain inputs.
An attacker could possibly use this issue to expose sensitive information.
This issue only affected Ubuntu 18.04 LTS. (CVE-2021-3426)

It was discovered that Python incorrectly handled certain FTP requests.
An attacker could possibly use this issue to expose sensitive information.
This issue only affected Ubuntu 14.04 ESM, Ubuntu 16.04 ESM, and Ubuntu 18.04 LTS.
(CVE-2021-4189)

It was discovered that Python incorrectly handled certain inputs.
An attacker could possibly use this issue to execute arbitrary code.
(CVE-2022-0391)

OSVersionArchitecturePackageVersionFilename
Ubuntu20.04noarchpython3.8-minimal< 3.8.10-0ubuntu1~20.04.4UNKNOWN
Ubuntu20.04noarchidle-python3.8< 3.8.10-0ubuntu1~20.04.4UNKNOWN
Ubuntu20.04noarchlibpython3.8< 3.8.10-0ubuntu1~20.04.4UNKNOWN
Ubuntu20.04noarchlibpython3.8-dbg< 3.8.10-0ubuntu1~20.04.4UNKNOWN
Ubuntu20.04noarchlibpython3.8-dev< 3.8.10-0ubuntu1~20.04.4UNKNOWN
Ubuntu20.04noarchlibpython3.8-minimal< 3.8.10-0ubuntu1~20.04.4UNKNOWN
Ubuntu20.04noarchlibpython3.8-stdlib< 3.8.10-0ubuntu1~20.04.4UNKNOWN
Ubuntu20.04noarchlibpython3.8-testsuite< 3.8.10-0ubuntu1~20.04.4UNKNOWN
Ubuntu20.04noarchpython3.8< 3.8.10-0ubuntu1~20.04.4UNKNOWN
Ubuntu20.04noarchpython3.8-dbg< 3.8.10-0ubuntu1~20.04.4UNKNOWN
Rows per page:
1-10 of 1011

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

AI Score

8

Confidence

High

EPSS

0.002

Percentile

59.5%