The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
CRLF injection vulnerability in the HTTPConnection.putheader function in urllib2 and urllib in CPython (aka Python) before 2.7.10 and 3.x before 3.4.4 allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in a URL.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade python | Aug 30, 2017 | Sep 2, 2016 |
| Amazon_linux | — | Upgrade python26Upgrade python34Upgrade python27 | Jul 22, 2016 | Jul 20, 2016 |
| Centos_linux | — | Upgrade python-libsUpgrade tkinterUpgrade pythonUpgrade python-testUpgrade python-debugUpgrade python-toolsUpgrade python-devel | Aug 22, 2016 | Aug 18, 2016 |
| Debian | — | Upgrade python2.7 | Mar 31, 2017 | Jun 21, 2016 |
| Freebsd | — | Upgrade python27Upgrade python33Upgrade python34Upgrade python35 | Dec 10, 2025 | Jun 30, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade python-libsUpgrade pythonUpgrade python-devel | Nov 30, 2017 | Sep 2, 2016 |
| Oracle Solaris | — | Upgrade runtime/python-27 to version 2.7.9-0.175.3.10.0.3.0 on Solaris 11.3Upgrade library/python/tkinter-27 to version 2.7.9-0.175.3.10.0.3.0 on Solaris 11.3Upgrade runtime/python-27/tests to version 2.7.9-0.175.3.10.0.3.0 on Solaris 11.3Upgrade runtime/python-34 to version 3.4.3-0.175.3.10.0.3.0 on Solaris 11.3Upgrade library/python/tkinter-34 to version 3.4.3-0.175.3.10.0.3.0 on Solaris 11.3 | May 29, 2017 | Sep 2, 2016 |
| Oracle_linux | — | Upgrade python-toolsUpgrade pythonUpgrade python-debugUpgrade python-libsUpgrade python-testUpgrade python-develUpgrade tkinter | Sep 2, 2016 | Nov 24, 2014 |
| Redhat_linux | — | Upgrade python-debuginfoUpgrade python-debugUpgrade python-toolsUpgrade python-develUpgrade python-testUpgrade tkinterUpgrade python-libsNo solution existsUpgrade python | Aug 22, 2016 | Aug 18, 2016 |
| Suse | — | Upgrade python-32bitUpgrade libpython2_6-1_0-32bitUpgrade python3-develUpgrade libpython2_7-1_0-32bitUpgrade libpython2_6-1_0-x86Upgrade python-base-x86Upgrade python-gdbmUpgrade python-baseUpgrade python3-base-32bitUpgrade python-x86Upgrade pythonUpgrade python3-testsuiteUpgrade python3-toolsUpgrade python-doc-pdfUpgrade python-demoUpgrade python3-idleUpgrade python3Upgrade libpython3_4m1_0-32bitUpgrade python-tkUpgrade libpython2_7-1_0Upgrade python-develUpgrade libpython2_6-1_0Upgrade python3-dbmUpgrade python-base-32bitUpgrade python-idleUpgrade python3-cursesUpgrade python3-tkUpgrade python3-32bitUpgrade libpython3_6m1_0-32bitUpgrade python-cursesUpgrade libpython3_6m1_0Upgrade python-docUpgrade python3-baseUpgrade libpython3_4m1_0Upgrade python-xml | Sep 2, 2016 | Sep 2, 2016 |
| Ubuntu | — | Upgrade libpython3.5-stdlibUpgrade python3.2-minimalUpgrade python3.5-minimalUpgrade libpython3.4-minimalUpgrade libpython3.5Upgrade python3.5Upgrade libpython2.7Upgrade libpython2.7-stdlibUpgrade python3.2Upgrade python2.7Upgrade libpython3.2Upgrade python3.4Upgrade libpython3.5-minimalUpgrade libpython3.4Upgrade libpython3.4-stdlibUpgrade libpython2.7-minimalUpgrade python2.7-minimalUpgrade python3.4-minimal | Nov 23, 2016 | Sep 2, 2016 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub