python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in the difflib.IS_LINE_JUNK method. An attacker could use this flaw to cause denial of service.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade python2-tkinterUpgrade python3Upgrade python2 | Aug 24, 2018 | Jun 19, 2018 |
| Amazon Linux Ami 2 | — | Upgrade pythonUpgrade tkinterUpgrade python-debugUpgrade python-toolsUpgrade python-libsUpgrade python-debuginfoUpgrade python-develUpgrade python-test | Apr 27, 2020 | Jun 19, 2018 |
| Amazon_linux | — | Upgrade python34Upgrade python35Upgrade python36Upgrade python27Upgrade python27 | Apr 27, 2018 | Apr 26, 2018 |
| Centos_linux | — | Upgrade python-testUpgrade python-libsUpgrade pythonUpgrade python-debugUpgrade python-debuginfoUpgrade python-toolsUpgrade python-develUpgrade tkinter | Aug 28, 2019 | Jun 19, 2018 |
| Debian | — | Upgrade python2.7 | Sep 28, 2018 | Apr 26, 2018 |
| Freebsd | — | Upgrade python27 | May 6, 2018 | May 5, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade tkinterUpgrade python-develUpgrade python-libsUpgrade python | Feb 22, 2019 | Jun 19, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade tkinterUpgrade pythonUpgrade python-develUpgrade python-libs | May 7, 2019 | Jun 19, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade pythonUpgrade tkinterUpgrade python-libsUpgrade python-devel | Mar 11, 2019 | Jun 19, 2018 |
| Oracle Solaris | — | Upgrade runtime/python-35 to version 3.5.6-11.4.7.0.1.2.0 on Solaris 11.4Upgrade runtime/python-27/tests to version 2.7.15-11.4.6.0.1.2.0 on Solaris 11.4Upgrade runtime/python-34 to version 3.4.9-11.4.7.0.1.2.0 on Solaris 11.4Upgrade runtime/python-27 to version 2.7.15-11.4.6.0.1.2.0 on Solaris 11.4Upgrade library/python/tkinter-27 to version 2.7.15-11.4.6.0.1.2.0 on Solaris 11.4Upgrade library/python/tkinter-35 to version 3.5.6-11.4.7.0.1.2.0 on Solaris 11.4Upgrade library/python/tkinter-34 to version 3.4.9-11.4.7.0.1.2.0 on Solaris 11.4 | Feb 20, 2019 | Jun 19, 2018 |
| Oracle_linux | — | Upgrade python-debugUpgrade pythonUpgrade python-develUpgrade python-testUpgrade python-libsUpgrade tkinterUpgrade python-tools | Nov 6, 2018 | Mar 14, 2018 |
| Redhat_linux | — | Upgrade python-debugUpgrade python-libsUpgrade tkinterNo solution existsUpgrade python-testUpgrade python-develUpgrade python-debuginfoUpgrade python-toolsUpgrade python | Oct 31, 2018 | Jun 19, 2018 |
| Suse | — | Upgrade libpython3_6m1_0Upgrade libpython2_7-1_0-32bitUpgrade python-base-x86Upgrade libpython3_6m1_0-32bitUpgrade python-cursesUpgrade python3-32bitUpgrade python-develUpgrade python3-develUpgrade python-docUpgrade python3-idleUpgrade libpython3_4m1_0Upgrade python3-baseUpgrade python3-dbmUpgrade libpython2_7-1_0Upgrade libpython2_6-1_0Upgrade python-doc-pdfUpgrade python-demoUpgrade python3-toolsUpgrade python3-cursesUpgrade libpython2_6-1_0-x86Upgrade python3-testsuiteUpgrade python-xmlUpgrade libpython3_4m1_0-32bitUpgrade python-tkUpgrade python-baseUpgrade python-base-32bitUpgrade python-x86Upgrade python3-tkUpgrade pythonUpgrade libpython2_6-1_0-32bitUpgrade python3Upgrade python-32bitUpgrade python-idleUpgrade python-gdbmUpgrade python3-base-32bit | Aug 18, 2018 | Apr 26, 2018 |
| Ubuntu | — | Upgrade python2.7Upgrade python3.10Upgrade python3.10-minimalUpgrade python3.8 (Ubuntu Pro)Upgrade python3.8Upgrade python2.7-minimalUpgrade python3.4Upgrade python3.8-minimalUpgrade python3.6 (Ubuntu Pro)Upgrade python3.11-minimal (Ubuntu Pro)Upgrade python3.4-minimalUpgrade python3.11 (Ubuntu Pro)Upgrade python3.11Upgrade python3.6-minimal (Ubuntu Pro)Upgrade python3.5-minimalUpgrade python3.11-minimalUpgrade python3.7 (Ubuntu Pro)Upgrade python3.12Upgrade python3.12-minimalUpgrade python3.8-minimal (Ubuntu Pro)Upgrade python3.9 (Ubuntu Pro)Upgrade python3.7-minimal (Ubuntu Pro)Upgrade python3.9-minimal (Ubuntu Pro)Upgrade python3.5-minimal (Ubuntu Pro)Upgrade python3.5 (Ubuntu Pro)Upgrade python3.5 | Nov 15, 2018 | Apr 26, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 19, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub