python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in the difflib.IS_LINE_JUNK method. An attacker could use this flaw to cause denial of service.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-python2alpine-linux-upgrade-python2-tkinteralpine-linux-upgrade-python3 | Aug 24, 2018 | Jun 19, 2018 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-pythonamazon-linux-ami-2-upgrade-python-debugamazon-linux-ami-2-upgrade-python-debuginfoamazon-linux-ami-2-upgrade-python-develamazon-linux-ami-2-upgrade-python-libsamazon-linux-ami-2-upgrade-python-testamazon-linux-ami-2-upgrade-python-toolsamazon-linux-ami-2-upgrade-tkinter | Apr 27, 2020 | Jun 19, 2018 | |
| Amazon_linux | — | amazon-linux-upgrade--python27amazon-linux-upgrade--python35amazon-linux-upgrade--python36amazon-linux-upgrade-python27amazon-linux-upgrade-python34 | Apr 27, 2018 | Apr 26, 2018 |
| Centos_linux | — | centos-upgrade-pythoncentos-upgrade-python-debugcentos-upgrade-python-debuginfocentos-upgrade-python-develcentos-upgrade-python-libscentos-upgrade-python-testcentos-upgrade-python-toolscentos-upgrade-tkinter | Aug 28, 2019 | Jun 19, 2018 |
| Debian | debian-upgrade-python2-7 | Sep 28, 2018 | Apr 26, 2018 | |
| Freebsd | freebsd-upgrade-package-python27 | May 6, 2018 | May 5, 2018 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-pythonhuawei-euleros-2_0_sp2-upgrade-python-develhuawei-euleros-2_0_sp2-upgrade-python-libshuawei-euleros-2_0_sp2-upgrade-tkinter | Feb 22, 2019 | Jun 19, 2018 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-pythonhuawei-euleros-2_0_sp3-upgrade-python-develhuawei-euleros-2_0_sp3-upgrade-python-libshuawei-euleros-2_0_sp3-upgrade-tkinter | May 7, 2019 | Jun 19, 2018 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-pythonhuawei-euleros-2_0_sp5-upgrade-python-develhuawei-euleros-2_0_sp5-upgrade-python-libshuawei-euleros-2_0_sp5-upgrade-tkinter | Mar 11, 2019 | Jun 19, 2018 | |
| Oracle Solaris | oracle-solaris-11-4-upgrade-library-python-tkinter-27-2-7-15-11-4-6-0-1-2-0oracle-solaris-11-4-upgrade-library-python-tkinter-34-3-4-9-11-4-7-0-1-2-0oracle-solaris-11-4-upgrade-library-python-tkinter-35-3-5-6-11-4-7-0-1-2-0oracle-solaris-11-4-upgrade-runtime-python-27-2-7-15-11-4-6-0-1-2-0oracle-solaris-11-4-upgrade-runtime-python-27-tests-2-7-15-11-4-6-0-1-2-0oracle-solaris-11-4-upgrade-runtime-python-34-3-4-9-11-4-7-0-1-2-0oracle-solaris-11-4-upgrade-runtime-python-35-3-5-6-11-4-7-0-1-2-0 | Feb 20, 2019 | Jun 19, 2018 | |
| Oracle_linux | — | oracle-linux-upgrade-pythonoracle-linux-upgrade-python-debugoracle-linux-upgrade-python-develoracle-linux-upgrade-python-libsoracle-linux-upgrade-python-testoracle-linux-upgrade-python-toolsoracle-linux-upgrade-tkinter | Nov 6, 2018 | Mar 14, 2018 |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-pythonredhat-upgrade-python-debugredhat-upgrade-python-debuginforedhat-upgrade-python-develredhat-upgrade-python-libsredhat-upgrade-python-testredhat-upgrade-python-toolsredhat-upgrade-tkinter | Oct 31, 2018 | Jun 19, 2018 | |
| Suse | — | suse-upgrade-libpython2_6-1_0suse-upgrade-libpython2_6-1_0-32bitsuse-upgrade-libpython2_6-1_0-x86suse-upgrade-libpython2_7-1_0suse-upgrade-libpython2_7-1_0-32bitsuse-upgrade-libpython3_4m1_0suse-upgrade-libpython3_4m1_0-32bitsuse-upgrade-libpython3_6m1_0suse-upgrade-libpython3_6m1_0-32bitsuse-upgrade-pythonsuse-upgrade-python-32bitsuse-upgrade-python-basesuse-upgrade-python-base-32bitsuse-upgrade-python-base-x86suse-upgrade-python-cursessuse-upgrade-python-demosuse-upgrade-python-develsuse-upgrade-python-docsuse-upgrade-python-doc-pdfsuse-upgrade-python-gdbmsuse-upgrade-python-idlesuse-upgrade-python-tksuse-upgrade-python-x86suse-upgrade-python-xmlsuse-upgrade-python3suse-upgrade-python3-32bitsuse-upgrade-python3-basesuse-upgrade-python3-base-32bitsuse-upgrade-python3-cursessuse-upgrade-python3-dbmsuse-upgrade-python3-develsuse-upgrade-python3-idlesuse-upgrade-python3-testsuitesuse-upgrade-python3-tksuse-upgrade-python3-tools | Aug 18, 2018 | Apr 26, 2018 |
| Ubuntu | ubuntu-pro-upgrade-python3-11ubuntu-pro-upgrade-python3-11-minimalubuntu-pro-upgrade-python3-5ubuntu-pro-upgrade-python3-5-minimalubuntu-pro-upgrade-python3-6ubuntu-pro-upgrade-python3-6-minimalubuntu-pro-upgrade-python3-7ubuntu-pro-upgrade-python3-7-minimalubuntu-pro-upgrade-python3-8ubuntu-pro-upgrade-python3-8-minimalubuntu-pro-upgrade-python3-9ubuntu-pro-upgrade-python3-9-minimalubuntu-upgrade-python2-7ubuntu-upgrade-python2-7-minimalubuntu-upgrade-python3-10ubuntu-upgrade-python3-10-minimalubuntu-upgrade-python3-11ubuntu-upgrade-python3-11-minimalubuntu-upgrade-python3-12ubuntu-upgrade-python3-12-minimalubuntu-upgrade-python3-4ubuntu-upgrade-python3-4-minimalubuntu-upgrade-python3-5ubuntu-upgrade-python3-5-minimalubuntu-upgrade-python3-8ubuntu-upgrade-python3-8-minimal | Nov 15, 2018 | Apr 26, 2018 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Jun 19, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub