python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in the difflib.IS_LINE_JUNK method. An attacker could use this flaw to cause denial of service.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade python3Upgrade python2Upgrade python2-tkinter | Aug 24, 2018 | Jun 19, 2018 |
| Amazon Linux Ami 2 | — | Upgrade pythonUpgrade python-debugUpgrade tkinterUpgrade python-develUpgrade python-testUpgrade python-toolsUpgrade python-libsUpgrade python-debuginfo | Apr 27, 2020 | Jun 19, 2018 |
| Amazon_linux | — | Upgrade python27Upgrade python34Upgrade python35Upgrade python36Upgrade python27 | Apr 27, 2018 | Apr 26, 2018 |
| Centos_linux | — | Upgrade python-debugUpgrade python-libsUpgrade python-testUpgrade pythonUpgrade python-debuginfoUpgrade python-toolsUpgrade tkinterUpgrade python-devel | Aug 28, 2019 | Jun 19, 2018 |
| Debian | — | Upgrade python2.7 | Sep 28, 2018 | Apr 26, 2018 |
| Freebsd | — | Upgrade python27 | May 6, 2018 | May 5, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade pythonUpgrade python-libsUpgrade python-develUpgrade tkinter | Feb 22, 2019 | Jun 19, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade pythonUpgrade tkinterUpgrade python-libsUpgrade python-devel | May 7, 2019 | Jun 19, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-develUpgrade python-libsUpgrade tkinterUpgrade python | Mar 11, 2019 | Jun 19, 2018 |
| Oracle Solaris | — | Upgrade runtime/python-35 to version 3.5.6-11.4.7.0.1.2.0 on Solaris 11.4Upgrade runtime/python-34 to version 3.4.9-11.4.7.0.1.2.0 on Solaris 11.4Upgrade runtime/python-27/tests to version 2.7.15-11.4.6.0.1.2.0 on Solaris 11.4Upgrade library/python/tkinter-27 to version 2.7.15-11.4.6.0.1.2.0 on Solaris 11.4Upgrade library/python/tkinter-34 to version 3.4.9-11.4.7.0.1.2.0 on Solaris 11.4Upgrade library/python/tkinter-35 to version 3.5.6-11.4.7.0.1.2.0 on Solaris 11.4Upgrade runtime/python-27 to version 2.7.15-11.4.6.0.1.2.0 on Solaris 11.4 | Feb 20, 2019 | Jun 19, 2018 |
| Oracle_linux | — | Upgrade pythonUpgrade python-debugUpgrade python-libsUpgrade python-toolsUpgrade tkinterUpgrade python-develUpgrade python-test | Nov 6, 2018 | Mar 14, 2018 |
| Redhat_linux | — | Upgrade tkinterUpgrade python-testNo solution existsUpgrade python-debugUpgrade python-libsUpgrade python-develUpgrade pythonUpgrade python-debuginfoUpgrade python-tools | Oct 31, 2018 | Jun 19, 2018 |
| Suse | — | Upgrade libpython3_6m1_0Upgrade libpython3_4m1_0Upgrade python-docUpgrade libpython3_6m1_0-32bitUpgrade python3-develUpgrade python3-baseUpgrade python-base-x86Upgrade libpython2_7-1_0-32bitUpgrade python3-idleUpgrade python-cursesUpgrade python-develUpgrade python3-32bitUpgrade python3-tkUpgrade python-x86Upgrade python3Upgrade python3-dbmUpgrade pythonUpgrade python3-testsuiteUpgrade python-baseUpgrade python-demoUpgrade libpython2_6-1_0Upgrade python-doc-pdfUpgrade libpython2_7-1_0Upgrade python-gdbmUpgrade python-32bitUpgrade python-idleUpgrade libpython2_6-1_0-x86Upgrade python-tkUpgrade python-xmlUpgrade python3-base-32bitUpgrade libpython3_4m1_0-32bitUpgrade libpython2_6-1_0-32bitUpgrade python-base-32bitUpgrade python3-cursesUpgrade python3-tools | Aug 18, 2018 | Apr 26, 2018 |
| Ubuntu | — | Upgrade python3.10Upgrade python3.6-minimal (Ubuntu Pro)Upgrade python3.7 (Ubuntu Pro)Upgrade python3.8-minimalUpgrade python3.10-minimalUpgrade python2.7-minimalUpgrade python3.8 (Ubuntu Pro)Upgrade python3.4Upgrade python3.6 (Ubuntu Pro)Upgrade python3.11-minimal (Ubuntu Pro)Upgrade python3.8Upgrade python3.11-minimalUpgrade python3.12Upgrade python3.11 (Ubuntu Pro)Upgrade python3.11Upgrade python2.7Upgrade python3.4-minimalUpgrade python3.5-minimalUpgrade python3.5 (Ubuntu Pro)Upgrade python3.9-minimal (Ubuntu Pro)Upgrade python3.5-minimal (Ubuntu Pro)Upgrade python3.7-minimal (Ubuntu Pro)Upgrade python3.12-minimalUpgrade python3.5Upgrade python3.8-minimal (Ubuntu Pro)Upgrade python3.9 (Ubuntu Pro) | Nov 15, 2018 | Apr 26, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 19, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub