python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in pop3lib's apop() method. An attacker could use this flaw to cause denial of service.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
- CVSS 3.0 Base Score: 4.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade python2-tkinterUpgrade python3Upgrade python2 | Aug 24, 2018 | Jun 18, 2018 |
| Amazon Linux Ami 2 | — | Upgrade python-develUpgrade python-libsUpgrade python-debugUpgrade python-testUpgrade python-debuginfoUpgrade pythonUpgrade python-toolsUpgrade tkinter | Apr 27, 2020 | Jun 18, 2018 |
| Amazon_linux | — | Upgrade python27Upgrade python27Upgrade python36Upgrade python35Upgrade python34 | Apr 27, 2018 | Apr 26, 2018 |
| Centos_linux | — | Upgrade python-develUpgrade python-debuginfoUpgrade python-libsUpgrade python-debugUpgrade python-testUpgrade pythonUpgrade python-toolsUpgrade tkinter | Aug 28, 2019 | Jun 18, 2018 |
| Debian | — | Upgrade python2.7 | Sep 28, 2018 | Apr 26, 2018 |
| Freebsd | — | Upgrade python27 | May 6, 2018 | May 5, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade pythonUpgrade tkinterUpgrade python-libsUpgrade python-devel | Feb 22, 2019 | Jun 18, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade python-libsUpgrade pythonUpgrade python-develUpgrade tkinter | May 7, 2019 | Jun 18, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-libsUpgrade tkinterUpgrade pythonUpgrade python-devel | Mar 11, 2019 | Jun 18, 2018 |
| Oracle Solaris | — | Upgrade library/python/tkinter-35 to version 3.5.6-11.4.7.0.1.2.0 on Solaris 11.4Upgrade runtime/python-27/tests to version 2.7.15-11.4.6.0.1.2.0 on Solaris 11.4Upgrade library/python/tkinter-27 to version 2.7.15-11.4.6.0.1.2.0 on Solaris 11.4Upgrade runtime/python-34 to version 3.4.9-11.4.7.0.1.2.0 on Solaris 11.4Upgrade runtime/python-35 to version 3.5.6-11.4.7.0.1.2.0 on Solaris 11.4Upgrade library/python/tkinter-34 to version 3.4.9-11.4.7.0.1.2.0 on Solaris 11.4Upgrade runtime/python-27 to version 2.7.15-11.4.6.0.1.2.0 on Solaris 11.4 | Feb 20, 2019 | Jun 18, 2018 |
| Oracle_linux | — | Upgrade python-libsUpgrade python-debugUpgrade python-develUpgrade python-testUpgrade pythonUpgrade python-toolsUpgrade tkinter | Nov 6, 2018 | Mar 14, 2018 |
| Redhat_linux | — | No solution existsUpgrade python-toolsUpgrade python-develUpgrade python-debuginfoUpgrade python-debugUpgrade tkinterUpgrade pythonUpgrade python-libsUpgrade python-test | Oct 31, 2018 | Jun 18, 2018 |
| Suse | — | Upgrade python-base-x86Upgrade libpython2_7-1_0-32bitUpgrade libpython2_6-1_0-32bitUpgrade python-docUpgrade python-doc-pdfUpgrade python-idleUpgrade python-x86Upgrade python-xmlUpgrade libpython2_7-1_0Upgrade python-base-32bitUpgrade python-develUpgrade python3-toolsUpgrade python3-testsuiteUpgrade python-demoUpgrade python3-cursesUpgrade python3Upgrade python3-baseUpgrade python3-dbmUpgrade python3-idleUpgrade libpython2_6-1_0Upgrade python36Upgrade python-gdbmUpgrade python-32bitUpgrade python3-develUpgrade libpython2_6-1_0-x86Upgrade libpython3_4m1_0Upgrade python3-32bitUpgrade python3-tkUpgrade libpython3_6m1_0-32bitUpgrade libpython3_6m1_0Upgrade python-cursesUpgrade python-baseUpgrade pythonUpgrade python-tkUpgrade python3-base-32bitUpgrade python36-baseUpgrade libpython3_4m1_0-32bit | Aug 18, 2018 | Apr 26, 2018 |
| Ubuntu | — | Upgrade python3.8-minimal (Ubuntu Pro)Upgrade python3.6-minimal (Ubuntu Pro)Upgrade python3.9 (Ubuntu Pro)Upgrade python3.5-minimal (Ubuntu Pro)Upgrade python3.7 (Ubuntu Pro)Upgrade python3.12Upgrade python3.5 (Ubuntu Pro)Upgrade python3.4-minimalUpgrade python3.8-minimalUpgrade python3.11Upgrade python3.6 (Ubuntu Pro)Upgrade python3.11-minimal (Ubuntu Pro)Upgrade python3.11-minimalUpgrade python3.5-minimalUpgrade python3.7-minimal (Ubuntu Pro)Upgrade python3.8Upgrade python3.8 (Ubuntu Pro)Upgrade python3.5Upgrade python3.9-minimal (Ubuntu Pro)Upgrade python2.7Upgrade python3.10Upgrade python3.11 (Ubuntu Pro)Upgrade python3.4Upgrade python2.7-minimalUpgrade python3.12-minimalUpgrade python3.10-minimal | Nov 15, 2018 | Apr 26, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 18, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub