library/glob.html in the Python 2 and 3 documentation before 2016 has potentially misleading information about whether sorting occurs, as demonstrated by irreproducible cancer-research results. NOTE: the effects of this documentation cross application domains, and thus it is likely that security-relevant code elsewhere is affected. This issue is not a Python implementation bug, and there are no reports that NMR researchers were specifically relying on library/glob.html. In other words, because the older documentation stated "finds all the pathnames matching a specified pattern according to the rules used by the Unix shell," one might have incorrectly inferred that the sorting that occurs in a Unix shell also occurred for glob.glob. There is a workaround in newer versions of Willoughby nmr-data_compilation-p2.py and nmr-data_compilation-p3.py, which call sort() directly.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Huawei Euleros 2_0_sp2 | — | Upgrade python-libsUpgrade python-develUpgrade tkinterUpgrade python | Dec 4, 2019 | Oct 12, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade python-libsUpgrade tkinterUpgrade pythonUpgrade python-devel | Dec 18, 2019 | Oct 12, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-develUpgrade tkinterUpgrade python-libsUpgrade python | Nov 19, 2019 | Oct 12, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3Upgrade python3-testUpgrade python3-libsUpgrade python3-devel | Jan 3, 2020 | Oct 12, 2019 |
| Ubuntu | — | Upgrade python3.7Upgrade python3.6-minimal (Ubuntu Pro)Upgrade python2.7Upgrade python3.6Upgrade python2.7-minimal (Ubuntu Pro)Upgrade python3.7-minimalUpgrade python3.8-minimalUpgrade python3.5 (Ubuntu Pro)Upgrade python2.7-minimalUpgrade python3.7 (Ubuntu Pro)Upgrade python2.7 (Ubuntu Pro)Upgrade python3.6-minimalUpgrade python3.5Upgrade python3.5-minimal (Ubuntu Pro)Upgrade python3.7-minimal (Ubuntu Pro)Upgrade python3.8Upgrade python3.4-minimal (Ubuntu Pro)Upgrade python3.8 (Ubuntu Pro)Upgrade python3.6 (Ubuntu Pro)Upgrade python3.4 (Ubuntu Pro)Upgrade python3.5-minimalUpgrade python3.8-minimal (Ubuntu Pro) | Aug 5, 2020 | Oct 12, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 12, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub