In Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to an infinite loop when opened by tarfile.open, because _proc_pax lacks header validation.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python2-requestsUpgrade python2-psycopg2-testsUpgrade python38-asn1cryptoUpgrade python38-psycopg2-testsUpgrade python38-chardetUpgrade python2-psycopg2Upgrade python2-chardetUpgrade python38-pytzUpgrade python-psycopg2-docUpgrade python38-pycparserUpgrade python2-setuptools_scmUpgrade python38-idnaUpgrade python38-requestsUpgrade python38-cffiUpgrade python2-pytzUpgrade python2-rpm-macrosUpgrade python2-dnsUpgrade python2-mockUpgrade python2-attrsUpgrade python38-mod_wsgiUpgrade python2-pysocksUpgrade python2-markupsafeUpgrade python2-pluggyUpgrade python2-docsUpgrade python-sqlalchemy-docUpgrade python2-psycopg2-debugUpgrade python2-docutilsUpgrade python38-scipyUpgrade python2-ipaddressUpgrade python2-pyUpgrade python38-CythonUpgrade python2-pytest-mockUpgrade python38-markupsafeUpgrade python2-docs-infoUpgrade python38-psycopg2Upgrade python2-pytestUpgrade python2-PyMySQLUpgrade python2-pyyamlUpgrade python2-sqlalchemyUpgrade python2-idnaUpgrade python2-CythonUpgrade python2-funcsigsUpgrade python38-pysocksUpgrade python2-coverageUpgrade python38-psycopg2-docUpgrade python38-cryptography | May 4, 2022 | Jul 13, 2020 |
| Alpine Linux | — | Upgrade python3 | Aug 22, 2024 | Jul 13, 2020 |
| Amazon Linux Ami 2 | — | Upgrade python38-tkinterUpgrade python38-debuginfoUpgrade python3-libsUpgrade python3-develUpgrade pythonUpgrade tkinterUpgrade python-debugUpgrade python3-tkinterUpgrade python38-develUpgrade python3-debuginfoUpgrade python38-debugUpgrade python38-libsUpgrade python-toolsUpgrade python-develUpgrade python3-toolsUpgrade python38Upgrade python-libsUpgrade python38-testUpgrade python3Upgrade python3-debugUpgrade python3-testUpgrade python-debuginfoUpgrade python-testUpgrade python38-tools | Sep 3, 2020 | Jul 13, 2020 |
| Amazon_linux | — | Upgrade python35Upgrade python36Upgrade python27Upgrade python26Upgrade python36Upgrade python34 | Sep 1, 2020 | Jul 13, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 13, 2020 |
| Centos_linux | — | Upgrade python38-numpy-debuginfoUpgrade python2-psycopg2-debuginfoUpgrade python2-mockUpgrade python-nose-docsUpgrade python38-scipyUpgrade python38-setuptoolsUpgrade python2-psycopg2-testsUpgrade python3-libsUpgrade python38-cffi-debuginfoUpgrade python2-virtualenvUpgrade python2-coverageUpgrade python2-pysocksUpgrade python38-lxmlUpgrade python2-pytestUpgrade python2-wheel-wheelUpgrade python-cffi-debugsourceUpgrade python38-babelUpgrade Cython-debugsourceUpgrade python38-setuptools-wheelUpgrade python38Upgrade python2-dnsUpgrade python2-pipUpgrade python-lxml-debugsourceUpgrade python2-debugUpgrade python38-debugUpgrade python38-pyyamlUpgrade python38-mod_wsgiUpgrade python-develUpgrade python38-pip-wheelUpgrade python3-develUpgrade python-psycopg2-docUpgrade python3-debugsourceUpgrade python2-psycopg2Upgrade PyYAML-debugsourceUpgrade python3Upgrade python38-psycopg2-debuginfoUpgrade python-pymongo-debuginfoUpgrade python38-lxml-debuginfoUpgrade python2-pymongo-gridfsUpgrade scipy-debugsourceUpgrade python38-markupsafeUpgrade python2-numpy-f2pyUpgrade python2-psycopg2-debugUpgrade python38-psutilUpgrade python38-debugsourceUpgrade python2-docsUpgrade python38-jinja2Upgrade python38-numpyUpgrade python38-pipUpgrade python3-debuginfoUpgrade python-psycopg2-debugsourceUpgrade python-coverage-debugsourceUpgrade python38-Cython-debuginfoUpgrade python38-scipy-debuginfoUpgrade python2-lxml-debuginfoUpgrade python38-pyyaml-debuginfoUpgrade python38-chardetUpgrade python-debugUpgrade python2-debuginfoUpgrade python2-debugsourceUpgrade python38-idleUpgrade python2-wheelUpgrade python-pymongo-debugsourceUpgrade python2-rpm-macrosUpgrade python3-idleUpgrade python-toolsUpgrade python2-attrsUpgrade python2-sixUpgrade platform-python-develUpgrade python38-sixUpgrade python3-tkinterUpgrade python2-setuptools-wheelUpgrade python38-plyUpgrade python2Upgrade python2-bsonUpgrade platform-python-debugUpgrade python2-backports-ssl_match_hostnameUpgrade babelUpgrade python2-testUpgrade python-debuginfoUpgrade python2-Cython-debuginfoUpgrade python38-CythonUpgrade python2-scipyUpgrade python2-sqlalchemyUpgrade python2-docs-infoUpgrade python38-cffiUpgrade python2-idnaUpgrade python2-markupsafeUpgrade python38-psycopg2-docUpgrade python2-tkinterUpgrade python3-testUpgrade python2-develUpgrade python2-requestsUpgrade python2-setuptools_scmUpgrade python38-pytzUpgrade python2-jinja2Upgrade python2-noseUpgrade python38-PyMySQLUpgrade python2-libsUpgrade python2-urllib3Upgrade python2-funcsigsUpgrade python38-rpm-macrosUpgrade python38-psycopg2Upgrade python38-asn1cryptoUpgrade python2-coverage-debuginfoUpgrade python-markupsafe-debugsourceUpgrade python38-psutil-debuginfoUpgrade python38-pysocksUpgrade python2-pymongo-debuginfoUpgrade python2-numpyUpgrade python38-wheelUpgrade python3-debugUpgrade python2-PyMySQLUpgrade python38-idnaUpgrade python38-libsUpgrade python38-cryptographyUpgrade python38-numpy-docUpgrade python38-tkinterUpgrade pythonUpgrade python2-docutilsUpgrade python-cryptography-debugsourceUpgrade python2-psycopg2-debug-debuginfoUpgrade python-testUpgrade python2-pyyaml-debuginfoUpgrade python-psycopg2-debuginfoUpgrade python2-numpy-docUpgrade python2-bson-debuginfoUpgrade python2-toolsUpgrade python2-pluggyUpgrade python38-numpy-f2pyUpgrade python38-testUpgrade python38-pycparserUpgrade platform-pythonUpgrade python38-wheel-wheelUpgrade python2-chardetUpgrade tkinterUpgrade python38-debuginfoUpgrade python2-lxmlUpgrade python38-markupsafe-debuginfoUpgrade python2-pip-wheelUpgrade python38-urllib3Upgrade python38-cryptography-debuginfoUpgrade python2-pyyamlUpgrade python2-pytzUpgrade python-sqlalchemy-docUpgrade python38-psycopg2-testsUpgrade numpy-debugsourceUpgrade python38-develUpgrade python2-CythonUpgrade python-psutil-debugsourceUpgrade python2-pygmentsUpgrade python2-pyUpgrade python2-numpy-debuginfoUpgrade python2-ipaddressUpgrade python2-scipy-debuginfoUpgrade python38-requestsUpgrade python2-pymongoUpgrade python2-setuptoolsUpgrade python2-backportsUpgrade python-libsUpgrade python2-babelUpgrade python2-pytest-mock | Nov 5, 2020 | Jul 13, 2020 |
| Debian | — | Upgrade python3.9Upgrade python2.7Upgrade pypy3 | Aug 24, 2020 | Jul 13, 2020 |
| Dell Powerstore Dsa2023129 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2023 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jun 1, 2021 |
| Freebsd | — | Upgrade python35 | Sep 21, 2020 | Sep 20, 2020 |
| Gentoo Linux | — | Upgrade dev-lang/python. | Aug 4, 2020 | Jul 13, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade python-develUpgrade python-libsUpgrade tkinterUpgrade python | Nov 3, 2020 | Jul 13, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade python-libsUpgrade tkinterUpgrade python-develUpgrade python | Sep 28, 2020 | Jul 13, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-libsUpgrade pythonUpgrade tkinterUpgrade python-devel | Nov 2, 2020 | Jul 13, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-develUpgrade python3-unversioned-commandUpgrade python3-libsUpgrade python3Upgrade python3-test | Jul 31, 2020 | Jul 13, 2020 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 19, 2022 |
| Oracle Solaris | — | Upgrade runtime/python-27 to version 2.7.18-11.4.25.0.1.75.2 on Solaris 11.4Upgrade runtime/python-37 to version 3.7.5-11.4.25.0.1.75.2 on Solaris 11.4Upgrade legacy/library/python/tkinter-35 to version 3.5.9-11.4.25.0.1.75.2 on Solaris 11.4Upgrade runtime/python-27/tests to version 2.7.18-11.4.25.0.1.75.2 on Solaris 11.4Upgrade library/python/tkinter-27 to version 2.7.18-11.4.25.0.1.75.2 on Solaris 11.4Upgrade library/python/tkinter-37 to version 3.7.5-11.4.25.0.1.75.2 on Solaris 11.4Upgrade legacy/runtime/python-35 to version 3.5.9-11.4.25.0.1.75.2 on Solaris 11.4Upgrade library/python-2/tkinter-27 to version 2.7.3-11.4.0.0.1.9.0 on Solaris 11.4 | Jan 19, 2021 | Jul 13, 2020 |
| Oracle_linux | — | Upgrade python38-cryptographyUpgrade python-develUpgrade python2-mockUpgrade python2-lxmlUpgrade python3-idleUpgrade python2-requestsUpgrade python2-debugUpgrade python2-rpm-macrosUpgrade python2-bsonUpgrade python-psycopg2-docUpgrade python2-pytestUpgrade python38-debugUpgrade python2-toolsUpgrade python2-backports-ssl_match_hostnameUpgrade python2-psycopg2-testsUpgrade python2-wheelUpgrade python-toolsUpgrade python2-attrsUpgrade python2-numpy-f2pyUpgrade python38-pysocksUpgrade python38-jinja2Upgrade python2-virtualenvUpgrade python3-libsUpgrade python2-docsUpgrade python2-pipUpgrade python38-pipUpgrade babelUpgrade python38-setuptoolsUpgrade python38-babelUpgrade python38-chardetUpgrade python3-tkinterUpgrade python38-mod_wsgiUpgrade python38-urllib3Upgrade python3-debugUpgrade python3-develUpgrade python38-pyyamlUpgrade python2-dnsUpgrade python2-psycopg2-debugUpgrade python2-setuptools_scmUpgrade python38-CythonUpgrade python2-coverageUpgrade platform-python-develUpgrade python2-pyyamlUpgrade python2-sixUpgrade python2-ipaddressUpgrade python2-pymongoUpgrade python2-noseUpgrade python2-testUpgrade python38-idleUpgrade python2-funcsigsUpgrade python2-wheel-wheelUpgrade python38-lxmlUpgrade python2-PyMySQLUpgrade python2-psycopg2Upgrade python38-plyUpgrade platform-python-debugUpgrade python-debugUpgrade python2-sqlalchemyUpgrade python38Upgrade python38-setuptools-wheelUpgrade python2-pytest-mockUpgrade python38-numpy-f2pyUpgrade python38-psycopg2-testsUpgrade python38-numpyUpgrade python2-setuptools-wheelUpgrade python2-pip-wheelUpgrade python2-markupsafeUpgrade python-libsUpgrade python38-numpy-docUpgrade platform-pythonUpgrade python38-markupsafeUpgrade python38-rpm-macrosUpgrade python2-pygmentsUpgrade python2-pyUpgrade python2-pluggyUpgrade python2-numpyUpgrade python2-CythonUpgrade python2-babelUpgrade python-nose-docsUpgrade python38-requestsUpgrade python38-PyMySQLUpgrade python38-develUpgrade python2-scipyUpgrade python2-pytzUpgrade python2-docutilsUpgrade pythonUpgrade python38-asn1cryptoUpgrade python2-pymongo-gridfsUpgrade python2Upgrade python38-testUpgrade python38-psycopg2-docUpgrade python38-wheel-wheelUpgrade python38-libsUpgrade python-sqlalchemy-docUpgrade python2-numpy-docUpgrade python2-idnaUpgrade python2-urllib3Upgrade python38-psutilUpgrade python2-jinja2Upgrade python2-chardetUpgrade python2-backportsUpgrade python38-psycopg2Upgrade python2-tkinterUpgrade python-testUpgrade tkinterUpgrade python38-idnaUpgrade python38-cffiUpgrade python3-testUpgrade python3Upgrade python2-setuptoolsUpgrade python2-libsUpgrade python38-scipyUpgrade python38-pytzUpgrade python38-wheelUpgrade python38-pip-wheelUpgrade python2-docs-infoUpgrade python2-pysocksUpgrade python2-develUpgrade python38-pycparserUpgrade python38-sixUpgrade python38-tkinter | Nov 12, 2020 | Dec 10, 2019 |
| Redhat_linux | — | Upgrade python2-PyMySQLUpgrade python2-pytest-mockUpgrade python38-mod_wsgiUpgrade python-cryptography-debugsourceNo solution existsUpgrade python2-numpyUpgrade python-libsUpgrade python2-attrsUpgrade python-markupsafe-debugsourceUpgrade python38-develUpgrade python2-bsonUpgrade platform-python-debugUpgrade python38-pyyamlUpgrade python3-tkinterUpgrade python2-tkinterUpgrade python2-ipaddressUpgrade babelUpgrade python38-asn1cryptoUpgrade python2-testUpgrade python38-debuginfoUpgrade python2-lxmlUpgrade python2-sqlalchemyUpgrade python38-jinja2Upgrade python38-tkinterUpgrade python-psycopg2-debugsourceUpgrade python2-setuptoolsUpgrade python38-pipUpgrade platform-pythonUpgrade python2-develUpgrade python2-numpy-debuginfoUpgrade python2-setuptools_scmUpgrade python38-psycopg2Upgrade python2-markupsafeUpgrade python3-debuginfoUpgrade python-pymongo-debuginfoUpgrade python2-funcsigsUpgrade python2-scipy-debuginfoUpgrade python38-pycparserUpgrade python2-bson-debuginfoUpgrade python2-debugsourceUpgrade python38-pytzUpgrade python2-pyUpgrade python3-libsUpgrade python38-Cython-debuginfoUpgrade python38-lxmlUpgrade python2-dnsUpgrade python-debugUpgrade numpy-debugsourceUpgrade python38-markupsafe-debuginfoUpgrade python2-idnaUpgrade python2-pysocksUpgrade python-develUpgrade python2Upgrade python3-debugsourceUpgrade python2-pymongo-gridfsUpgrade python2-scipyUpgrade python2-docs-infoUpgrade python2-psycopg2-debugUpgrade python2-numpy-docUpgrade python38-CythonUpgrade python2-pip-wheelUpgrade python-cffi-debugsourceUpgrade python2-pymongo-debuginfoUpgrade python38-debugUpgrade python3-develUpgrade python2-pygmentsUpgrade python3-idleUpgrade python2-pytzUpgrade python38-wheel-wheelUpgrade python38-wheelUpgrade python2-docutilsUpgrade python2-pluggyUpgrade python2-toolsUpgrade python-sqlalchemy-docUpgrade python38-numpy-f2pyUpgrade python2-coverageUpgrade python2-requestsUpgrade python2-psycopg2-debug-debuginfoUpgrade python2-pyyaml-debuginfoUpgrade python38-numpy-debuginfoUpgrade python38-rpm-macrosUpgrade python38-requestsUpgrade python2-pytestUpgrade python38-sixUpgrade python2-virtualenvUpgrade python2-docsUpgrade python38-psutil-debuginfoUpgrade python3-debugUpgrade platform-python-develUpgrade python2-pymongoUpgrade python2-CythonUpgrade python38-setuptoolsUpgrade python38-pip-wheelUpgrade python2-babelUpgrade python-pymongo-debugsourceUpgrade python-psycopg2-debuginfoUpgrade PyYAML-debugsourceUpgrade python2-backports-ssl_match_hostnameUpgrade python38-markupsafeUpgrade python2-sixUpgrade python38-psycopg2-docUpgrade python38-plyUpgrade python2-setuptools-wheelUpgrade python2-urllib3Upgrade python2-numpy-f2pyUpgrade python3-testUpgrade python2-pipUpgrade python-toolsUpgrade python38-testUpgrade python2-jinja2Upgrade python38Upgrade python2-lxml-debuginfoUpgrade python-lxml-debugsourceUpgrade python-testUpgrade python2-chardetUpgrade python38-chardetUpgrade python2-backportsUpgrade python2-noseUpgrade python2-debugUpgrade python38-psycopg2-debuginfoUpgrade python38-setuptools-wheelUpgrade python2-rpm-macrosUpgrade python38-libsUpgrade python-debuginfoUpgrade python2-pyyamlUpgrade pythonUpgrade python38-scipyUpgrade python-coverage-debugsourceUpgrade python38-debugsourceUpgrade python2-wheel-wheelUpgrade python2-Cython-debuginfoUpgrade python-psutil-debugsourceUpgrade python2-wheelUpgrade tkinterUpgrade python2-debuginfoUpgrade python38-cryptographyUpgrade python38-lxml-debuginfoUpgrade python38-idleUpgrade python2-coverage-debuginfoUpgrade python38-cffiUpgrade scipy-debugsourceUpgrade python2-mockUpgrade Cython-debugsourceUpgrade python38-idnaUpgrade python2-psycopg2-testsUpgrade python2-libsUpgrade python38-cryptography-debuginfoUpgrade python2-psycopg2-debuginfoUpgrade python38-PyMySQLUpgrade python38-psutilUpgrade python38-cffi-debuginfoUpgrade python38-numpy-docUpgrade python3Upgrade python38-urllib3Upgrade python2-psycopg2Upgrade python-nose-docsUpgrade python38-pyyaml-debuginfoUpgrade python-psycopg2-docUpgrade python38-psycopg2-testsUpgrade python38-scipy-debuginfoUpgrade python38-pysocksUpgrade python38-babelUpgrade python38-numpy | Nov 5, 2020 | Jul 13, 2020 |
| Rocky_linux | — | Upgrade python-markupsafe-debugsourceUpgrade python38-numpy-f2pyUpgrade python38-CythonUpgrade python38-scipy-debuginfoUpgrade python38-psutil-debuginfoUpgrade python2-markupsafeUpgrade python38-cffiUpgrade python-pymongo-debugsourceUpgrade python2-bsonUpgrade python2-psycopg2-debugUpgrade python2-pymongo-gridfsUpgrade python2-scipy-debuginfoUpgrade python2-coverage-debuginfoUpgrade scipy-debugsourceUpgrade python2-sqlalchemyUpgrade python-cffi-debugsourceUpgrade python38-psycopg2-testsUpgrade numpy-debugsourceUpgrade python38-cryptography-debuginfoUpgrade python38-numpy-debuginfoUpgrade python2-pyyaml-debuginfoUpgrade python38-psycopg2Upgrade python-psycopg2-debugsourceUpgrade python2-pymongoUpgrade python2-psycopg2-debuginfoUpgrade python38-markupsafe-debuginfoUpgrade python38-psycopg2-debuginfoUpgrade python38-Cython-debuginfoUpgrade python-psycopg2-docUpgrade python38-psutilUpgrade python-psutil-debugsourceUpgrade python38-scipyUpgrade python38-pyyamlUpgrade python2-psycopg2Upgrade python2-pyyamlUpgrade python2-bson-debuginfoUpgrade python38-cryptographyUpgrade python2-CythonUpgrade python38-numpyUpgrade python-coverage-debugsourceUpgrade PyYAML-debugsourceUpgrade python-pymongo-debuginfoUpgrade python2-coverageUpgrade python-psycopg2-debuginfoUpgrade python2-psycopg2-debug-debuginfoUpgrade python-cryptography-debugsourceUpgrade python38-markupsafeUpgrade python2-scipyUpgrade python2-pymongo-debuginfoUpgrade python2-psycopg2-testsUpgrade python38-cffi-debuginfoUpgrade python2-Cython-debuginfoUpgrade python38-mod_wsgiUpgrade python38-pyyaml-debuginfoUpgrade python38-psycopg2-docUpgrade Cython-debugsource | Mar 12, 2024 | Jul 13, 2020 |
| Suse | — | Upgrade python39-cursesUpgrade python3-cursesUpgrade libpython2_7-1_0Upgrade python-develUpgrade python3-doc-devhelpUpgrade python-xmlUpgrade python39-dbmUpgrade python-docUpgrade python3-docUpgrade python3Upgrade python3-develUpgrade python3-toolsUpgrade python-base-32bitUpgrade libpython2_7-1_0-32bitUpgrade python3-testsuiteUpgrade python3-32bitUpgrade python-doc-pdfUpgrade python-demoUpgrade python-cursesUpgrade python39-toolsUpgrade libpython3_6m1_0-32bitUpgrade python39Upgrade libpython3_9-1_0Upgrade python39-tkUpgrade python36-baseUpgrade python-32bitUpgrade python39-baseUpgrade python-idleUpgrade python39-idleUpgrade python36Upgrade python3-dbmUpgrade python-gdbmUpgrade python-tkUpgrade libpython3_4m1_0-32bitUpgrade python3-idleUpgrade pythonUpgrade python3-base-32bitUpgrade python3-tkUpgrade python39-develUpgrade libpython3_6m1_0Upgrade python-baseUpgrade python3-baseUpgrade libpython3_4m1_0 | Aug 13, 2020 | Jul 13, 2020 |
| Ubuntu | — | Upgrade python3.8Upgrade python3.4-minimal (Ubuntu Pro)Upgrade python3.5Upgrade python2.7-minimalUpgrade python3.4 (Ubuntu Pro)Upgrade python3.5-minimalUpgrade python3.6 (Ubuntu Pro)Upgrade python2.7 (Ubuntu Pro)Upgrade python3.8 (Ubuntu Pro)Upgrade python3.7-minimalUpgrade python3.6Upgrade python3.6-minimalUpgrade python3.6-minimal (Ubuntu Pro)Upgrade python3.7 (Ubuntu Pro)Upgrade python3.7-minimal (Ubuntu Pro)Upgrade python3.7Upgrade python3.8-minimal (Ubuntu Pro)Upgrade python2.7Upgrade python3.5-minimal (Ubuntu Pro)Upgrade python3.8-minimalUpgrade python3.5 (Ubuntu Pro)Upgrade python2.7-minimal (Ubuntu Pro) | Aug 5, 2020 | Jul 13, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 13, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub