The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Python Software Foundation Python (CPython) version 2.7 contains a CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in shutil module (make_archive function) that can result in Denial of service, Information gain via injection of arbitrary files on the system or entire drive. This attack appear to be exploitable via Passage of unfiltered user input to the function. This vulnerability appears to have been fixed in after commit add531a1e55b0a739b0f42582f1c9747e5649ace.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade python2.7 | Sep 28, 2018 | Sep 18, 2018 |
| F5 Big Ip | — | — | May 23, 2024 | Sep 18, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade tkinterUpgrade pythonUpgrade python-libsUpgrade python-devel | Jun 17, 2020 | Sep 18, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade python-libsUpgrade python-develUpgrade pythonUpgrade tkinter | Apr 16, 2020 | Sep 18, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-develUpgrade tkinterUpgrade python-libsUpgrade python | Feb 24, 2020 | Sep 18, 2018 |
| Suse | — | Upgrade libpython2_7-1_0Upgrade libpython3_4m1_0Upgrade python-32bitUpgrade python3-base-32bitUpgrade python3-testsuiteUpgrade libpython3_6m1_0Upgrade python3-develUpgrade python-xmlUpgrade python-develUpgrade python-cursesUpgrade python3-tkUpgrade python3-32bitUpgrade python-gdbmUpgrade python3-cursesUpgrade python36Upgrade python36-baseUpgrade python3-idleUpgrade libpython2_7-1_0-32bitUpgrade python-tkUpgrade python-doc-pdfUpgrade python3Upgrade python-baseUpgrade python-demoUpgrade python3-dbmUpgrade python3-baseUpgrade libpython3_4m1_0-32bitUpgrade pythonUpgrade libpython3_6m1_0-32bitUpgrade python-base-32bitUpgrade python-idleUpgrade python3-toolsUpgrade python-doc | Oct 9, 2018 | Sep 18, 2018 |
| Ubuntu | — | Upgrade python3.4Upgrade python3.5Upgrade python2.7Upgrade python3.4-minimalUpgrade python2.7-minimalUpgrade python3.5-minimal | Nov 15, 2018 | Sep 18, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 18, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub