In Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to an infinite loop when opened by tarfile.open, because _proc_pax lacks header validation.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python38-cffiUpgrade python-psycopg2-docUpgrade python2-markupsafeUpgrade python2-rpm-macrosUpgrade python2-chardetUpgrade python2-dnsUpgrade python38-asn1cryptoUpgrade python38-pytzUpgrade python2-psycopg2Upgrade python38-idnaUpgrade python38-psycopg2-testsUpgrade python38-pycparserUpgrade python2-mockUpgrade python38-requestsUpgrade python2-pytzUpgrade python-sqlalchemy-docUpgrade python38-chardetUpgrade python2-docsUpgrade python2-pysocksUpgrade python2-setuptools_scmUpgrade python2-pluggyUpgrade python38-mod_wsgiUpgrade python2-requestsUpgrade python2-psycopg2-testsUpgrade python2-attrsUpgrade python2-PyMySQLUpgrade python2-pyyamlUpgrade python2-sqlalchemyUpgrade python2-pyUpgrade python2-docutilsUpgrade python2-CythonUpgrade python2-pytestUpgrade python38-markupsafeUpgrade python2-ipaddressUpgrade python38-pysocksUpgrade python38-CythonUpgrade python2-psycopg2-debugUpgrade python38-cryptographyUpgrade python38-psycopg2Upgrade python2-docs-infoUpgrade python2-pytest-mockUpgrade python2-idnaUpgrade python2-funcsigsUpgrade python2-coverageUpgrade python38-psycopg2-docUpgrade python38-scipy | May 4, 2022 | Jul 13, 2020 |
| Alpine Linux | — | Upgrade python3 | Aug 22, 2024 | Jul 13, 2020 |
| Amazon Linux Ami 2 | — | Upgrade python-debugUpgrade python38-debuginfoUpgrade python3-libsUpgrade python38-develUpgrade python38-tkinterUpgrade pythonUpgrade tkinterUpgrade python3-tkinterUpgrade python3-develUpgrade python3-debuginfoUpgrade python38-debugUpgrade python38-libsUpgrade python3-testUpgrade python-debuginfoUpgrade python-libsUpgrade python-develUpgrade python38-toolsUpgrade python-toolsUpgrade python3-debugUpgrade python3-toolsUpgrade python-testUpgrade python38Upgrade python38-testUpgrade python3 | Sep 3, 2020 | Jul 13, 2020 |
| Amazon_linux | — | Upgrade python34Upgrade python36Upgrade python36Upgrade python26Upgrade python27Upgrade python35 | Sep 1, 2020 | Jul 13, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 13, 2020 |
| Centos_linux | — | Upgrade python-debuginfoUpgrade python2-mockUpgrade python2-lxml-debuginfoUpgrade python38-Cython-debuginfoUpgrade python2-pipUpgrade python2-wheel-wheelUpgrade python2-Cython-debuginfoUpgrade python2-pytestUpgrade python38Upgrade python2-backports-ssl_match_hostnameUpgrade python-develUpgrade python3Upgrade python38-markupsafeUpgrade python38-lxmlUpgrade python38-chardetUpgrade python2-virtualenvUpgrade python38-pyyaml-debuginfoUpgrade python2-psycopg2-debuginfoUpgrade python38-lxml-debuginfoUpgrade python38-scipyUpgrade python38-babelUpgrade python38-setuptools-wheelUpgrade python3-libsUpgrade python-psycopg2-debugsourceUpgrade python38-psycopg2-debuginfoUpgrade python38-psutilUpgrade python-nose-docsUpgrade python38-jinja2Upgrade python38-plyUpgrade python3-develUpgrade python-cffi-debugsourceUpgrade python2-debugUpgrade python38-pip-wheelUpgrade python38-pipUpgrade python2-coverageUpgrade python-debugUpgrade python3-debugsourceUpgrade python2-dnsUpgrade python2-psycopg2-testsUpgrade python38-mod_wsgiUpgrade python-lxml-debugsourceUpgrade python-pymongo-debuginfoUpgrade python2-testUpgrade python38-CythonUpgrade python38-pyyamlUpgrade python38-debugUpgrade python38-cffi-debuginfoUpgrade python2-setuptools-wheelUpgrade platform-python-debugUpgrade Cython-debugsourceUpgrade python2-pymongo-gridfsUpgrade python2-numpy-f2pyUpgrade python2-docsUpgrade python2-psycopg2-debugUpgrade python-psycopg2-docUpgrade python38-scipy-debuginfoUpgrade python2-pysocksUpgrade python2-debuginfoUpgrade python38-numpy-debuginfoUpgrade python2-debugsourceUpgrade python-pymongo-debugsourceUpgrade babelUpgrade python38-sixUpgrade python2Upgrade python3-tkinterUpgrade python-toolsUpgrade python2-wheelUpgrade platform-python-develUpgrade python2-rpm-macrosUpgrade python2-sixUpgrade python2-bsonUpgrade python3-idleUpgrade python-coverage-debugsourceUpgrade python38-idleUpgrade python2-attrsUpgrade python3-debuginfoUpgrade PyYAML-debugsourceUpgrade python2-psycopg2Upgrade python38-setuptoolsUpgrade python38-debugsourceUpgrade scipy-debugsourceUpgrade python38-numpyUpgrade python2-numpyUpgrade python-psutil-debugsourceUpgrade python2-scipy-debuginfoUpgrade python2-ipaddressUpgrade python2-funcsigsUpgrade python2-bson-debuginfoUpgrade python-markupsafe-debugsourceUpgrade python2-noseUpgrade python2-psycopg2-debug-debuginfoUpgrade python38-psutil-debuginfoUpgrade pythonUpgrade python2-numpy-debuginfoUpgrade python2-tkinterUpgrade python2-markupsafeUpgrade python2-setuptoolsUpgrade python38-libsUpgrade python-libsUpgrade python38-PyMySQLUpgrade python2-docutilsUpgrade python2-backportsUpgrade python2-CythonUpgrade python2-babelUpgrade python38-idnaUpgrade python38-tkinterUpgrade python38-requestsUpgrade python38-rpm-macrosUpgrade python3-testUpgrade python38-pytzUpgrade python38-numpy-docUpgrade python38-cryptographyUpgrade python2-setuptools_scmUpgrade python2-scipyUpgrade python2-PyMySQLUpgrade python2-pygmentsUpgrade python38-psycopg2-docUpgrade python38-pysocksUpgrade python3-debugUpgrade python38-debuginfoUpgrade python2-pytest-mockUpgrade python-cryptography-debugsourceUpgrade python2-sqlalchemyUpgrade python2-urllib3Upgrade python2-libsUpgrade python2-pyUpgrade python38-testUpgrade python2-pluggyUpgrade python2-pyyaml-debuginfoUpgrade python2-jinja2Upgrade python2-toolsUpgrade python2-idnaUpgrade python2-chardetUpgrade python-psycopg2-debuginfoUpgrade python-testUpgrade python38-wheel-wheelUpgrade platform-pythonUpgrade python38-psycopg2Upgrade tkinterUpgrade python38-urllib3Upgrade python38-pycparserUpgrade python38-numpy-f2pyUpgrade python38-cffiUpgrade python2-docs-infoUpgrade python2-numpy-docUpgrade python2-pymongoUpgrade python2-requestsUpgrade python38-asn1cryptoUpgrade python2-lxmlUpgrade python2-develUpgrade python2-pymongo-debuginfoUpgrade python2-pip-wheelUpgrade python38-markupsafe-debuginfoUpgrade python38-develUpgrade python38-cryptography-debuginfoUpgrade python2-pyyamlUpgrade python2-pytzUpgrade python-sqlalchemy-docUpgrade numpy-debugsourceUpgrade python38-psycopg2-testsUpgrade python2-coverage-debuginfoUpgrade python38-wheel | Nov 5, 2020 | Jul 13, 2020 |
| Debian | — | Upgrade python3.9Upgrade python2.7Upgrade pypy3 | Aug 24, 2020 | Jul 13, 2020 |
| Dell Powerstore Dsa2023129 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2023 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jun 1, 2021 |
| Freebsd | — | Upgrade python35 | Sep 21, 2020 | Sep 20, 2020 |
| Gentoo Linux | — | Upgrade dev-lang/python. | Aug 4, 2020 | Jul 13, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade tkinterUpgrade pythonUpgrade python-libsUpgrade python-devel | Nov 3, 2020 | Jul 13, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade python-libsUpgrade python-develUpgrade tkinterUpgrade python | Sep 28, 2020 | Jul 13, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade pythonUpgrade python-libsUpgrade python-develUpgrade tkinter | Nov 2, 2020 | Jul 13, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-testUpgrade python3Upgrade python3-unversioned-commandUpgrade python3-develUpgrade python3-libs | Jul 31, 2020 | Jul 13, 2020 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 19, 2022 |
| Oracle Solaris | — | Upgrade library/python-2/tkinter-27 to version 2.7.3-11.4.0.0.1.9.0 on Solaris 11.4Upgrade legacy/runtime/python-35 to version 3.5.9-11.4.25.0.1.75.2 on Solaris 11.4Upgrade legacy/library/python/tkinter-35 to version 3.5.9-11.4.25.0.1.75.2 on Solaris 11.4Upgrade runtime/python-37 to version 3.7.5-11.4.25.0.1.75.2 on Solaris 11.4Upgrade runtime/python-27/tests to version 2.7.18-11.4.25.0.1.75.2 on Solaris 11.4Upgrade library/python/tkinter-27 to version 2.7.18-11.4.25.0.1.75.2 on Solaris 11.4Upgrade runtime/python-27 to version 2.7.18-11.4.25.0.1.75.2 on Solaris 11.4Upgrade library/python/tkinter-37 to version 3.7.5-11.4.25.0.1.75.2 on Solaris 11.4 | Jan 19, 2021 | Jul 13, 2020 |
| Oracle_linux | — | Upgrade python2-lxmlUpgrade python2-requestsUpgrade python38Upgrade python38-cryptographyUpgrade python38-plyUpgrade python2-sixUpgrade python3-debugUpgrade python3-tkinterUpgrade python38-urllib3Upgrade python38-babelUpgrade python2-PyMySQLUpgrade python38-debugUpgrade python38-chardetUpgrade python2-ipaddressUpgrade python2-pipUpgrade python38-pipUpgrade python38-jinja2Upgrade python2-psycopg2-testsUpgrade python2-backports-ssl_match_hostnameUpgrade python2-wheelUpgrade python2-psycopg2-debugUpgrade python2-pyyamlUpgrade python-toolsUpgrade python2-attrsUpgrade babelUpgrade python2-numpy-f2pyUpgrade python2-toolsUpgrade python2-docsUpgrade python2-mockUpgrade python2-virtualenvUpgrade python38-mod_wsgiUpgrade python38-pyyamlUpgrade python38-setuptoolsUpgrade python2-testUpgrade python2-debugUpgrade python2-bsonUpgrade python2-pytestUpgrade python38-pysocksUpgrade python2-rpm-macrosUpgrade python3-libsUpgrade python2-sqlalchemyUpgrade python2-wheel-wheelUpgrade python38-idleUpgrade python38-CythonUpgrade python3-idleUpgrade python-psycopg2-docUpgrade python-develUpgrade python2-dnsUpgrade python2-funcsigsUpgrade python2-coverageUpgrade platform-python-develUpgrade python2-pymongoUpgrade python3-develUpgrade python2-noseUpgrade python2-psycopg2Upgrade python-debugUpgrade python2-setuptools_scmUpgrade python38-lxmlUpgrade platform-python-debugUpgrade platform-pythonUpgrade python38-markupsafeUpgrade python2-tkinterUpgrade python2-numpy-docUpgrade python2-chardetUpgrade python2-backportsUpgrade python38-scipyUpgrade python38-psycopg2Upgrade python2Upgrade python38-pip-wheelUpgrade python2-docs-infoUpgrade python2-develUpgrade python38-idnaUpgrade python3Upgrade python38-cffiUpgrade python3-testUpgrade python2-setuptoolsUpgrade python2-pysocksUpgrade python2-libsUpgrade python38-sixUpgrade python38-numpy-f2pyUpgrade python2-pyUpgrade python-nose-docsUpgrade python2-babelUpgrade python2-pygmentsUpgrade python38-rpm-macrosUpgrade python2-numpyUpgrade python38-psycopg2-docUpgrade python38-psutilUpgrade python38-pytzUpgrade python38-testUpgrade python2-pytzUpgrade python38-setuptools-wheelUpgrade python38-requestsUpgrade python38-PyMySQLUpgrade python38-psycopg2-testsUpgrade python38-develUpgrade python2-docutilsUpgrade python2-scipyUpgrade pythonUpgrade tkinterUpgrade python-libsUpgrade python38-libsUpgrade python-sqlalchemy-docUpgrade python-testUpgrade python38-wheel-wheelUpgrade python2-urllib3Upgrade python2-pytest-mockUpgrade python38-numpyUpgrade python2-setuptools-wheelUpgrade python2-pip-wheelUpgrade python38-tkinterUpgrade python2-CythonUpgrade python2-markupsafeUpgrade python2-pluggyUpgrade python38-numpy-docUpgrade python2-pymongo-gridfsUpgrade python38-pycparserUpgrade python38-wheelUpgrade python38-asn1cryptoUpgrade python2-jinja2Upgrade python2-idna | Nov 12, 2020 | Dec 10, 2019 |
| Redhat_linux | — | Upgrade python2-coverageUpgrade python2-docs-infoUpgrade python3-develUpgrade python38-pytzUpgrade python2-numpyUpgrade python38-pycparserUpgrade python38-psutil-debuginfoUpgrade platform-python-debugUpgrade python38-psycopg2Upgrade python-libsUpgrade python2-tkinterUpgrade python38-sixUpgrade python2-bson-debuginfoUpgrade python38-mod_wsgiUpgrade python38-numpy-debuginfoUpgrade python2-develUpgrade python2-pluggyUpgrade python2-PyMySQLUpgrade python2-pymongo-gridfsUpgrade python2-pytest-mockUpgrade python-cffi-debugsourceUpgrade python2-pymongo-debuginfoUpgrade python-pymongo-debuginfoUpgrade python38-CythonUpgrade platform-python-develUpgrade python2-pymongoUpgrade python2-numpy-docUpgrade python3-debugUpgrade python2-docsUpgrade python3-debugsourceUpgrade python38-wheelUpgrade python38-wheel-wheelUpgrade python2-funcsigsUpgrade python2-bsonUpgrade python38-develUpgrade python-develUpgrade python3-debuginfoUpgrade python2-toolsUpgrade python2-testUpgrade python38-markupsafe-debuginfoUpgrade python-sqlalchemy-docUpgrade python-markupsafe-debugsourceUpgrade python2-dnsUpgrade python2Upgrade python2-idnaUpgrade python2-scipy-debuginfoUpgrade python2-pysocksUpgrade python2-pyyaml-debuginfoUpgrade python2-numpy-debuginfoUpgrade python2-pyUpgrade python2-pygmentsUpgrade python38-requestsUpgrade python2-sqlalchemyUpgrade python3-libsUpgrade python2-pytestUpgrade python-psycopg2-debugsourceUpgrade python38-lxmlUpgrade python2-psycopg2-debugUpgrade python2-lxmlUpgrade python2-setuptools_scmUpgrade python38-pyyamlUpgrade python-debugUpgrade python-cryptography-debugsourceUpgrade python38-Cython-debuginfoUpgrade platform-pythonUpgrade python2-pip-wheelUpgrade python38-tkinterUpgrade python2-setuptoolsUpgrade python38-numpy-f2pyUpgrade python38-debuginfoUpgrade python38-jinja2Upgrade python38-pipUpgrade python38-rpm-macrosUpgrade python2-pytzUpgrade python2-psycopg2-debug-debuginfoUpgrade python38-debugUpgrade python3-idleUpgrade python2-virtualenvUpgrade numpy-debugsourceUpgrade python2-ipaddressUpgrade python3-tkinterUpgrade python2-attrsNo solution existsUpgrade python2-docutilsUpgrade python2-requestsUpgrade babelUpgrade python2-debugsourceUpgrade python38-asn1cryptoUpgrade python2-scipyUpgrade python2-markupsafeUpgrade python-lxml-debugsourceUpgrade python2-chardetUpgrade python-nose-docsUpgrade python-pymongo-debugsourceUpgrade python-psycopg2-debuginfoUpgrade python38-scipy-debuginfoUpgrade pythonUpgrade python2-sixUpgrade python2-debuginfoUpgrade python2-wheel-wheelUpgrade python38-libsUpgrade python2-Cython-debuginfoUpgrade python2-psycopg2-testsUpgrade python2-debugUpgrade python-testUpgrade python38-debugsourceUpgrade python38-setuptools-wheelUpgrade python2-psycopg2Upgrade python38-testUpgrade Cython-debugsourceUpgrade scipy-debugsourceUpgrade python38Upgrade python38-urllib3Upgrade python38-setuptoolsUpgrade tkinterUpgrade python2-wheelUpgrade python2-lxml-debuginfoUpgrade python2-babelUpgrade python3Upgrade python2-setuptools-wheelUpgrade python2-jinja2Upgrade python38-psycopg2-docUpgrade python-toolsUpgrade python2-psycopg2-debuginfoUpgrade python-psycopg2-docUpgrade python2-pipUpgrade python2-mockUpgrade python2-urllib3Upgrade python38-idleUpgrade python38-psycopg2-testsUpgrade python38-cffiUpgrade python38-chardetUpgrade python38-cryptographyUpgrade python-psutil-debugsourceUpgrade python2-libsUpgrade python2-rpm-macrosUpgrade python38-psutilUpgrade python38-PyMySQLUpgrade python2-backportsUpgrade python38-psycopg2-debuginfoUpgrade python-debuginfoUpgrade python2-CythonUpgrade python38-plyUpgrade python38-markupsafeUpgrade python2-noseUpgrade python2-numpy-f2pyUpgrade python3-testUpgrade python38-babelUpgrade python2-coverage-debuginfoUpgrade python38-pip-wheelUpgrade python38-cryptography-debuginfoUpgrade python38-numpyUpgrade python38-idnaUpgrade python-coverage-debugsourceUpgrade python2-backports-ssl_match_hostnameUpgrade python38-numpy-docUpgrade python38-cffi-debuginfoUpgrade python2-pyyamlUpgrade python38-scipyUpgrade python38-pysocksUpgrade python38-lxml-debuginfoUpgrade PyYAML-debugsourceUpgrade python38-pyyaml-debuginfo | Nov 5, 2020 | Jul 13, 2020 |
| Rocky_linux | — | Upgrade python2-psycopg2-debug-debuginfoUpgrade python2-bson-debuginfoUpgrade python-cryptography-debugsourceUpgrade PyYAML-debugsourceUpgrade python2-pymongo-debuginfoUpgrade python2-scipyUpgrade python38-pyyamlUpgrade python-psycopg2-debuginfoUpgrade python38-scipyUpgrade python2-CythonUpgrade python2-psycopg2Upgrade python38-pyyaml-debuginfoUpgrade python-coverage-debugsourceUpgrade python2-psycopg2-testsUpgrade python-pymongo-debuginfoUpgrade python38-markupsafeUpgrade python38-mod_wsgiUpgrade python38-cffi-debuginfoUpgrade python2-Cython-debuginfoUpgrade python2-pyyamlUpgrade python38-cryptographyUpgrade python2-coverageUpgrade python38-numpyUpgrade python38-psycopg2-docUpgrade Cython-debugsourceUpgrade python38-numpy-debuginfoUpgrade python2-bsonUpgrade python38-psycopg2-debuginfoUpgrade python38-psycopg2Upgrade python38-CythonUpgrade python2-pymongoUpgrade python2-scipy-debuginfoUpgrade python2-psycopg2-debuginfoUpgrade python38-markupsafe-debuginfoUpgrade python-psycopg2-docUpgrade python-cffi-debugsourceUpgrade python38-Cython-debuginfoUpgrade python2-pyyaml-debuginfoUpgrade scipy-debugsourceUpgrade python-psutil-debugsourceUpgrade python38-psutil-debuginfoUpgrade python2-psycopg2-debugUpgrade python38-psutilUpgrade python2-coverage-debuginfoUpgrade numpy-debugsourceUpgrade python-pymongo-debugsourceUpgrade python38-numpy-f2pyUpgrade python2-pymongo-gridfsUpgrade python-markupsafe-debugsourceUpgrade python38-cffiUpgrade python-psycopg2-debugsourceUpgrade python38-psycopg2-testsUpgrade python38-scipy-debuginfoUpgrade python38-cryptography-debuginfoUpgrade python2-sqlalchemyUpgrade python2-markupsafe | Mar 12, 2024 | Jul 13, 2020 |
| Suse | — | Upgrade python-demoUpgrade python39-cursesUpgrade python39-dbmUpgrade python3-develUpgrade python3Upgrade libpython2_7-1_0Upgrade python-xmlUpgrade libpython2_7-1_0-32bitUpgrade python3-32bitUpgrade python3-cursesUpgrade python-develUpgrade python-docUpgrade python3-doc-devhelpUpgrade python-base-32bitUpgrade python3-toolsUpgrade python3-docUpgrade python3-testsuiteUpgrade python-doc-pdfUpgrade python36-baseUpgrade python-cursesUpgrade python39-toolsUpgrade python39-develUpgrade python3-tkUpgrade python-baseUpgrade libpython3_6m1_0Upgrade libpython3_4m1_0-32bitUpgrade python3-baseUpgrade python-gdbmUpgrade python3-dbmUpgrade python3-idleUpgrade python3-base-32bitUpgrade pythonUpgrade libpython3_4m1_0Upgrade python-tkUpgrade python39-tkUpgrade python39-baseUpgrade python-idleUpgrade python-32bitUpgrade python36Upgrade libpython3_6m1_0-32bitUpgrade libpython3_9-1_0Upgrade python39-idleUpgrade python39 | Aug 13, 2020 | Jul 13, 2020 |
| Ubuntu | — | Upgrade python2.7-minimalUpgrade python3.8 (Ubuntu Pro)Upgrade python3.6 (Ubuntu Pro)Upgrade python3.8Upgrade python3.4-minimal (Ubuntu Pro)Upgrade python3.7-minimalUpgrade python3.5Upgrade python2.7 (Ubuntu Pro)Upgrade python3.4 (Ubuntu Pro)Upgrade python3.5-minimalUpgrade python2.7-minimal (Ubuntu Pro)Upgrade python3.6-minimal (Ubuntu Pro)Upgrade python3.5-minimal (Ubuntu Pro)Upgrade python3.7 (Ubuntu Pro)Upgrade python3.6-minimalUpgrade python3.7-minimal (Ubuntu Pro)Upgrade python3.5 (Ubuntu Pro)Upgrade python3.7Upgrade python3.6Upgrade python3.8-minimalUpgrade python3.8-minimal (Ubuntu Pro)Upgrade python2.7 | Aug 5, 2020 | Jul 13, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 13, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub