The CGIHandler class in Python before 2.7.12 does not protect against the HTTP_PROXY variable name clash in a CGI script, which could allow a remote attacker to redirect HTTP requests.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade python34Upgrade python27Upgrade python26 | Sep 2, 2016 | Aug 18, 2016 |
| Centos_linux | — | Upgrade python-develUpgrade python-debugUpgrade python-libsUpgrade python-toolsUpgrade python-testUpgrade tkinterUpgrade python | Aug 22, 2016 | Aug 18, 2016 |
| Debian | — | Upgrade python2.7 | Jul 30, 2024 | Nov 27, 2019 |
| Oracle_linux | — | Upgrade python-libsUpgrade python-develUpgrade tkinterUpgrade python-toolsUpgrade python-testUpgrade python-debugUpgrade python | Aug 22, 2016 | Jul 18, 2016 |
| Redhat_linux | — | Upgrade tkinterUpgrade python-libsUpgrade pythonUpgrade python-testUpgrade python-debugUpgrade python-toolsUpgrade python-debuginfoNo solution existsUpgrade python-devel | Aug 22, 2016 | Aug 18, 2016 |
| Suse | — | Upgrade python3Upgrade python-docUpgrade libpython3_6m1_0-32bitUpgrade python3-idleUpgrade libpython3_4m1_0-32bitUpgrade pythonUpgrade python-base-x86Upgrade libpython3_4m1_0Upgrade python-baseUpgrade python-demoUpgrade python3-32bitUpgrade libpython2_6-1_0-x86Upgrade libpython2_6-1_0-32bitUpgrade libpython2_7-1_0-32bitUpgrade python3-toolsUpgrade python3-baseUpgrade python3-dbmUpgrade python-idleUpgrade python3-tkUpgrade python-xmlUpgrade libpython2_7-1_0Upgrade python-gdbmUpgrade python-cursesUpgrade python3-testsuiteUpgrade python-develUpgrade python-base-32bitUpgrade python-32bitUpgrade python3-develUpgrade python-x86Upgrade libpython2_6-1_0Upgrade python-doc-pdfUpgrade python3-base-32bitUpgrade libpython3_6m1_0Upgrade python-tkUpgrade python3-curses | Aug 22, 2016 | Aug 18, 2016 |
| Ubuntu | — | Upgrade libpython3.4-stdlibUpgrade libpython3.4Upgrade python3.2-minimalUpgrade libpython3.5Upgrade python2.7Upgrade python3.4-minimalUpgrade libpython2.7Upgrade python3.5Upgrade libpython3.5-stdlibUpgrade python3.4Upgrade libpython3.4-minimalUpgrade python3.5-minimalUpgrade libpython3.5-minimalUpgrade libpython3.2Upgrade libpython2.7-stdlibUpgrade python3.2Upgrade libpython2.7-minimalUpgrade python2.7-minimal | Nov 23, 2016 | Aug 18, 2016 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub