In Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to an infinite loop when opened by tarfile.open, because _proc_pax lacks header validation.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python38-cffiUpgrade python38-requestsUpgrade python-psycopg2-docUpgrade python38-psycopg2-testsUpgrade python2-mockUpgrade python38-asn1cryptoUpgrade python2-attrsUpgrade python2-docsUpgrade python2-setuptools_scmUpgrade python38-mod_wsgiUpgrade python38-pycparserUpgrade python2-requestsUpgrade python2-pytzUpgrade python2-rpm-macrosUpgrade python2-pysocksUpgrade python-sqlalchemy-docUpgrade python2-psycopg2-testsUpgrade python2-psycopg2Upgrade python38-pytzUpgrade python38-idnaUpgrade python2-pluggyUpgrade python38-chardetUpgrade python2-chardetUpgrade python2-dnsUpgrade python2-markupsafeUpgrade python2-idnaUpgrade python2-sqlalchemyUpgrade python2-PyMySQLUpgrade python2-ipaddressUpgrade python2-pytest-mockUpgrade python38-CythonUpgrade python38-cryptographyUpgrade python38-psycopg2Upgrade python2-docs-infoUpgrade python2-pytestUpgrade python2-coverageUpgrade python2-CythonUpgrade python38-scipyUpgrade python38-psycopg2-docUpgrade python2-docutilsUpgrade python2-pyUpgrade python2-pyyamlUpgrade python2-psycopg2-debugUpgrade python38-pysocksUpgrade python2-funcsigsUpgrade python38-markupsafe | May 4, 2022 | Jul 13, 2020 |
| Alpine Linux | — | Upgrade python3 | Aug 22, 2024 | Jul 13, 2020 |
| Amazon Linux Ami 2 | — | Upgrade python38-debugUpgrade python3-develUpgrade python3-tkinterUpgrade tkinterUpgrade python38-debuginfoUpgrade python3-libsUpgrade pythonUpgrade python3-debuginfoUpgrade python38-develUpgrade python38-tkinterUpgrade python-debugUpgrade python3-debugUpgrade python38Upgrade python-debuginfoUpgrade python-toolsUpgrade python3-testUpgrade python38-toolsUpgrade python38-libsUpgrade python-develUpgrade python3Upgrade python38-testUpgrade python3-toolsUpgrade python-testUpgrade python-libs | Sep 3, 2020 | Jul 13, 2020 |
| Amazon_linux | — | Upgrade python36Upgrade python34Upgrade python36Upgrade python35Upgrade python27Upgrade python26 | Sep 1, 2020 | Jul 13, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 13, 2020 |
| Centos_linux | — | Upgrade python2-pipUpgrade python3Upgrade python3-debugsourceUpgrade python38-pip-wheelUpgrade python-develUpgrade python38-cffi-debuginfoUpgrade python38-psycopg2-debuginfoUpgrade python2-psycopg2-debuginfoUpgrade python38-debugUpgrade Cython-debugsourceUpgrade babelUpgrade python2Upgrade python2-wheelUpgrade python38-sixUpgrade python2-debugUpgrade python38-idleUpgrade python-toolsUpgrade platform-python-debugUpgrade python-debugUpgrade python-pymongo-debugsourceUpgrade python2-debuginfoUpgrade python2-attrsUpgrade python2-rpm-macrosUpgrade python2-backports-ssl_match_hostnameUpgrade platform-python-develUpgrade python3-tkinterUpgrade python2-debugsourceUpgrade python2-wheel-wheelUpgrade python38-setuptools-wheelUpgrade python2-coverageUpgrade python2-pytestUpgrade python2-virtualenvUpgrade python-cffi-debugsourceUpgrade python38-babelUpgrade python2-sixUpgrade python-debuginfoUpgrade python-pymongo-debuginfoUpgrade python38-CythonUpgrade python3-libsUpgrade python2-psycopg2-testsUpgrade python2-Cython-debuginfoUpgrade python3-develUpgrade python-nose-docsUpgrade python2-dnsUpgrade python38-scipy-debuginfoUpgrade python38-pipUpgrade python3-idleUpgrade python2-testUpgrade python2-setuptools-wheelUpgrade python38-lxml-debuginfoUpgrade python2-pymongo-gridfsUpgrade python38-plyUpgrade python2-psycopg2-debugUpgrade python38-numpy-debuginfoUpgrade python38-setuptoolsUpgrade python2-pysocksUpgrade python-psycopg2-debugsourceUpgrade python38-chardetUpgrade python38-numpyUpgrade python38-scipyUpgrade python2-mockUpgrade python38-pyyaml-debuginfoUpgrade python-lxml-debugsourceUpgrade python38-markupsafeUpgrade python38-mod_wsgiUpgrade python2-docsUpgrade python38-Cython-debuginfoUpgrade python38Upgrade python-psycopg2-docUpgrade python2-lxml-debuginfoUpgrade scipy-debugsourceUpgrade python2-numpy-f2pyUpgrade python38-debugsourceUpgrade python38-pyyamlUpgrade python38-lxmlUpgrade python38-psutilUpgrade python3-debuginfoUpgrade python38-jinja2Upgrade PyYAML-debugsourceUpgrade python2-psycopg2Upgrade python2-bsonUpgrade python-coverage-debugsourceUpgrade python2-numpy-debuginfoUpgrade python2-toolsUpgrade python38-pycparserUpgrade python2-pyyaml-debuginfoUpgrade python2-pluggyUpgrade python2-idnaUpgrade python2-lxmlUpgrade python2-pyUpgrade python38-asn1cryptoUpgrade python-libsUpgrade python2-tkinterUpgrade python38-wheelUpgrade python2-jinja2Upgrade python38-urllib3Upgrade python38-testUpgrade tkinterUpgrade python-psycopg2-debuginfoUpgrade python38-wheel-wheelUpgrade python38-numpy-f2pyUpgrade python2-chardetUpgrade python-testUpgrade platform-pythonUpgrade python3-debugUpgrade python38-psutil-debuginfoUpgrade python2-pymongo-debuginfoUpgrade python38-psycopg2Upgrade python-markupsafe-debugsourceUpgrade python38-pysocksUpgrade python2-coverage-debuginfoUpgrade python2-numpyUpgrade python2-pyyamlUpgrade python38-cryptography-debuginfoUpgrade python2-sqlalchemyUpgrade python38-develUpgrade python38-cffiUpgrade python38-PyMySQLUpgrade python2-libsUpgrade python2-docs-infoUpgrade python38-psycopg2-testsUpgrade python2-urllib3Upgrade numpy-debugsourceUpgrade python38-numpy-docUpgrade python2-setuptools_scmUpgrade python38-requestsUpgrade python2-babelUpgrade python2-CythonUpgrade python2-backportsUpgrade python38-cryptographyUpgrade python2-PyMySQLUpgrade python38-tkinterUpgrade python3-testUpgrade python2-funcsigsUpgrade python2-bson-debuginfoUpgrade python2-psycopg2-debug-debuginfoUpgrade python-psutil-debugsourceUpgrade python2-ipaddressUpgrade python2-scipy-debuginfoUpgrade python38-pytzUpgrade python38-rpm-macrosUpgrade python2-scipyUpgrade python38-idnaUpgrade python2-pygmentsUpgrade python38-markupsafe-debuginfoUpgrade python38-debuginfoUpgrade python2-pytzUpgrade python2-noseUpgrade python2-pip-wheelUpgrade python38-libsUpgrade python2-pymongoUpgrade python2-setuptoolsUpgrade pythonUpgrade python-sqlalchemy-docUpgrade python2-pytest-mockUpgrade python2-markupsafeUpgrade python2-requestsUpgrade python2-numpy-docUpgrade python2-develUpgrade python-cryptography-debugsourceUpgrade python38-psycopg2-docUpgrade python2-docutils | Nov 5, 2020 | Jul 13, 2020 |
| Debian | — | Upgrade pypy3Upgrade python3.9Upgrade python2.7 | Aug 24, 2020 | Jul 13, 2020 |
| Dell Powerstore Dsa2023129 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2023 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jun 1, 2021 |
| Freebsd | — | Upgrade python35 | Sep 21, 2020 | Sep 20, 2020 |
| Gentoo Linux | — | Upgrade dev-lang/python. | Aug 4, 2020 | Jul 13, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade tkinterUpgrade pythonUpgrade python-develUpgrade python-libs | Nov 3, 2020 | Jul 13, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade python-develUpgrade pythonUpgrade tkinterUpgrade python-libs | Sep 28, 2020 | Jul 13, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-develUpgrade tkinterUpgrade pythonUpgrade python-libs | Nov 2, 2020 | Jul 13, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-develUpgrade python3-unversioned-commandUpgrade python3-libsUpgrade python3-testUpgrade python3 | Jul 31, 2020 | Jul 13, 2020 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 19, 2022 |
| Oracle Solaris | — | Upgrade library/python-2/tkinter-27 to version 2.7.3-11.4.0.0.1.9.0 on Solaris 11.4Upgrade legacy/runtime/python-35 to version 3.5.9-11.4.25.0.1.75.2 on Solaris 11.4Upgrade runtime/python-27/tests to version 2.7.18-11.4.25.0.1.75.2 on Solaris 11.4Upgrade library/python/tkinter-37 to version 3.7.5-11.4.25.0.1.75.2 on Solaris 11.4Upgrade library/python/tkinter-27 to version 2.7.18-11.4.25.0.1.75.2 on Solaris 11.4Upgrade runtime/python-37 to version 3.7.5-11.4.25.0.1.75.2 on Solaris 11.4Upgrade runtime/python-27 to version 2.7.18-11.4.25.0.1.75.2 on Solaris 11.4Upgrade legacy/library/python/tkinter-35 to version 3.5.9-11.4.25.0.1.75.2 on Solaris 11.4 | Jan 19, 2021 | Jul 13, 2020 |
| Oracle_linux | — | Upgrade python2-docs-infoUpgrade python38-pycparserUpgrade python38-scipyUpgrade python38-pytzUpgrade python2-CythonUpgrade python2-pygmentsUpgrade python2-idnaUpgrade python38-wheelUpgrade python38-wheel-wheelUpgrade python2-urllib3Upgrade python2-tkinterUpgrade python38-psutilUpgrade python2-chardetUpgrade python38-numpy-f2pyUpgrade python38-rpm-macrosUpgrade python2-pluggyUpgrade python2-pyUpgrade python38-asn1cryptoUpgrade python2-backportsUpgrade python38-markupsafeUpgrade python2-numpyUpgrade platform-pythonUpgrade python2Upgrade python2-pymongo-gridfsUpgrade python38-testUpgrade python-sqlalchemy-docUpgrade python2-pip-wheelUpgrade python2-pytest-mockUpgrade python2-markupsafeUpgrade python38-numpy-docUpgrade python-libsUpgrade python38-cffiUpgrade python38-idnaUpgrade python3-testUpgrade python38-tkinterUpgrade python2-pysocksUpgrade python2-setuptoolsUpgrade python3Upgrade python2-setuptools-wheelUpgrade python38-psycopg2Upgrade python2-jinja2Upgrade python38-sixUpgrade python2-develUpgrade python38-numpyUpgrade python38-libsUpgrade python38-setuptools-wheelUpgrade python38-requestsUpgrade pythonUpgrade python38-pip-wheelUpgrade python2-libsUpgrade python2-pytzUpgrade python2-docutilsUpgrade tkinterUpgrade python-testUpgrade python-nose-docsUpgrade python38-psycopg2-docUpgrade python2-numpy-docUpgrade python2-babelUpgrade python2-scipyUpgrade python38-psycopg2-testsUpgrade python38-PyMySQLUpgrade python38-develUpgrade python-debugUpgrade python2-psycopg2-testsUpgrade python2-docsUpgrade python38-mod_wsgiUpgrade python38-babelUpgrade python38-plyUpgrade python38Upgrade python2-debugUpgrade platform-python-debugUpgrade python38-lxmlUpgrade python2-noseUpgrade python2-lxmlUpgrade python2-psycopg2Upgrade python2-bsonUpgrade python38-debugUpgrade python2-pytestUpgrade python2-PyMySQLUpgrade python2-psycopg2-debugUpgrade python2-rpm-macrosUpgrade python2-attrsUpgrade python2-virtualenvUpgrade python2-toolsUpgrade python-toolsUpgrade babelUpgrade python38-CythonUpgrade python38-urllib3Upgrade python2-setuptools_scmUpgrade python3-debugUpgrade python2-numpy-f2pyUpgrade python38-pyyamlUpgrade python38-cryptographyUpgrade python38-pipUpgrade python2-pipUpgrade python38-pysocksUpgrade python38-jinja2Upgrade python3-libsUpgrade python2-wheelUpgrade python2-coverageUpgrade python2-backports-ssl_match_hostnameUpgrade platform-python-develUpgrade python38-setuptoolsUpgrade python-develUpgrade python3-idleUpgrade python2-sqlalchemyUpgrade python38-idleUpgrade python2-requestsUpgrade python2-mockUpgrade python2-dnsUpgrade python2-pyyamlUpgrade python2-pymongoUpgrade python2-ipaddressUpgrade python2-testUpgrade python2-sixUpgrade python2-wheel-wheelUpgrade python2-funcsigsUpgrade python-psycopg2-docUpgrade python3-develUpgrade python38-chardetUpgrade python3-tkinter | Nov 12, 2020 | Dec 10, 2019 |
| Redhat_linux | — | Upgrade python38-numpy-docUpgrade python38-PyMySQLUpgrade python38-urllib3Upgrade python2-numpy-f2pyUpgrade python-testUpgrade python2-chardetUpgrade python2-CythonUpgrade python38-cryptographyUpgrade python38-markupsafeUpgrade python2-jinja2Upgrade python-lxml-debugsourceUpgrade python38-setuptoolsUpgrade python38-testUpgrade python-toolsUpgrade tkinterUpgrade python38-psycopg2-docUpgrade python2-lxml-debuginfoUpgrade python2-setuptools-wheelUpgrade python38-cffi-debuginfoUpgrade python38-psutilUpgrade python38-numpyUpgrade python2-backportsUpgrade python38-pip-wheelUpgrade python3Upgrade python2-babelUpgrade python38-pysocksUpgrade python2-coverage-debuginfoUpgrade python38-babelUpgrade python38-lxml-debuginfoUpgrade python2-backports-ssl_match_hostnameUpgrade python38-debugsourceUpgrade python2-pyyamlUpgrade python38-pyyaml-debuginfoUpgrade python-psycopg2-debuginfoUpgrade python2-wheelUpgrade python38-setuptools-wheelUpgrade python38-cryptography-debuginfoUpgrade python-debuginfoUpgrade python-coverage-debugsourceUpgrade python38Upgrade pythonUpgrade scipy-debugsourceUpgrade python38-psycopg2-testsUpgrade python2-urllib3Upgrade python2-pipUpgrade python-psutil-debugsourceUpgrade python38-plyUpgrade python2-debuginfoUpgrade python2-Cython-debuginfoUpgrade python-nose-docsUpgrade python38-idleUpgrade python2-sixUpgrade python-pymongo-debugsourceUpgrade python38-scipy-debuginfoUpgrade python2-debugUpgrade python2-libsUpgrade python38-psycopg2-debuginfoUpgrade python2-noseUpgrade python38-idnaUpgrade PyYAML-debugsourceUpgrade python38-scipyUpgrade python2-mockUpgrade python-psycopg2-docUpgrade python2-rpm-macrosUpgrade python2-psycopg2-debuginfoUpgrade python38-cffiUpgrade python3-testUpgrade Cython-debugsourceUpgrade python2-wheel-wheelUpgrade python38-libsUpgrade python38-chardetUpgrade python2-psycopg2Upgrade python2-psycopg2-testsUpgrade python2-toolsUpgrade python-markupsafe-debugsourceUpgrade python38-tkinterUpgrade python2-dnsUpgrade python2-numpy-debuginfoUpgrade python38-Cython-debuginfoUpgrade python-psycopg2-debugsourceUpgrade python2-pyyaml-debuginfoUpgrade python2-pyUpgrade python2-setuptoolsUpgrade python38-sixUpgrade python38-pipUpgrade python3-debugsourceUpgrade python2-sqlalchemyUpgrade python2-scipy-debuginfoUpgrade python38-requestsUpgrade python38-wheelUpgrade platform-pythonUpgrade python2-PyMySQLUpgrade python2-pymongoUpgrade python2-pytest-mockUpgrade python2-docsUpgrade python3-idleUpgrade numpy-debugsourceUpgrade python3-debugUpgrade python2-numpy-docUpgrade python2Upgrade python-sqlalchemy-docUpgrade python-debugUpgrade python2-pygmentsUpgrade python2-develUpgrade python2-psycopg2-debugUpgrade python38-jinja2Upgrade python-pymongo-debuginfoUpgrade python2-pysocksUpgrade python2-pymongo-gridfsUpgrade python2-pymongo-debuginfoUpgrade python38-lxmlUpgrade python38-markupsafe-debuginfoUpgrade python2-pip-wheelUpgrade python2-idnaUpgrade python-develUpgrade python-cffi-debugsourceUpgrade platform-python-develUpgrade python38-CythonUpgrade python2-funcsigsUpgrade python2-lxmlUpgrade python3-debuginfoUpgrade python38-develUpgrade python2-debugsourceUpgrade python38-debuginfoUpgrade python38-rpm-macrosUpgrade python38-wheel-wheelUpgrade python3-libsUpgrade python38-pyyamlUpgrade python2-virtualenvUpgrade python2-pytestUpgrade python2-bsonUpgrade python2-psycopg2-debug-debuginfoUpgrade python2-numpyUpgrade python2-setuptools_scmUpgrade python2-testUpgrade python38-pycparserUpgrade python38-pytzUpgrade python2-requestsUpgrade python2-ipaddressUpgrade python2-pytzUpgrade python38-numpy-debuginfoUpgrade python3-tkinterUpgrade python38-debugUpgrade python2-docutilsUpgrade python38-numpy-f2pyUpgrade babelUpgrade python3-develUpgrade python2-pluggyUpgrade python2-attrsUpgrade python2-tkinterNo solution existsUpgrade python-cryptography-debugsourceUpgrade python2-bson-debuginfoUpgrade python2-docs-infoUpgrade platform-python-debugUpgrade python38-psycopg2Upgrade python2-markupsafeUpgrade python38-mod_wsgiUpgrade python2-scipyUpgrade python38-psutil-debuginfoUpgrade python38-asn1cryptoUpgrade python-libsUpgrade python2-coverage | Nov 5, 2020 | Jul 13, 2020 |
| Rocky_linux | — | Upgrade python-pymongo-debuginfoUpgrade python38-mod_wsgiUpgrade python38-markupsafeUpgrade python38-pyyaml-debuginfoUpgrade python38-cryptographyUpgrade python-psycopg2-debuginfoUpgrade python2-Cython-debuginfoUpgrade python38-cffi-debuginfoUpgrade python2-pyyamlUpgrade python2-psycopg2-debug-debuginfoUpgrade python-cryptography-debugsourceUpgrade python38-scipyUpgrade python38-pyyamlUpgrade python-coverage-debugsourceUpgrade python2-CythonUpgrade python2-bson-debuginfoUpgrade python38-psycopg2-docUpgrade python2-psycopg2Upgrade python2-coverageUpgrade PyYAML-debugsourceUpgrade Cython-debugsourceUpgrade python38-numpyUpgrade python2-scipyUpgrade python2-pymongo-debuginfoUpgrade python2-psycopg2-testsUpgrade python-psycopg2-debugsourceUpgrade python38-markupsafe-debuginfoUpgrade python2-psycopg2-debuginfoUpgrade python2-pyyaml-debuginfoUpgrade python2-pymongoUpgrade python2-sqlalchemyUpgrade python38-psycopg2-debuginfoUpgrade python2-scipy-debuginfoUpgrade python38-psycopg2-testsUpgrade python2-psycopg2-debugUpgrade numpy-debugsourceUpgrade scipy-debugsourceUpgrade python-pymongo-debugsourceUpgrade python38-cffiUpgrade python-markupsafe-debugsourceUpgrade python38-numpy-f2pyUpgrade python2-bsonUpgrade python2-coverage-debuginfoUpgrade python38-CythonUpgrade python2-markupsafeUpgrade python38-scipy-debuginfoUpgrade python38-cryptography-debuginfoUpgrade python38-psutil-debuginfoUpgrade python38-psutilUpgrade python2-pymongo-gridfsUpgrade python-psutil-debugsourceUpgrade python-cffi-debugsourceUpgrade python38-numpy-debuginfoUpgrade python38-Cython-debuginfoUpgrade python38-psycopg2Upgrade python-psycopg2-doc | Mar 12, 2024 | Jul 13, 2020 |
| Suse | — | Upgrade python-gdbmUpgrade libpython3_4m1_0-32bitUpgrade python-32bitUpgrade libpython3_6m1_0Upgrade python39-baseUpgrade python-baseUpgrade python39-tkUpgrade python3-dbmUpgrade python3-baseUpgrade python-tkUpgrade libpython3_4m1_0Upgrade python39-develUpgrade python3-tkUpgrade python3-idleUpgrade python-cursesUpgrade python39-toolsUpgrade pythonUpgrade python36-baseUpgrade python3-base-32bitUpgrade python39Upgrade libpython3_6m1_0-32bitUpgrade python-idleUpgrade python39-idleUpgrade libpython3_9-1_0Upgrade python36Upgrade python-base-32bitUpgrade python3-doc-devhelpUpgrade python3-docUpgrade python-doc-pdfUpgrade python3-cursesUpgrade libpython2_7-1_0Upgrade python3-testsuiteUpgrade python39-cursesUpgrade python39-dbmUpgrade python-xmlUpgrade python-develUpgrade python-demoUpgrade python3Upgrade python3-toolsUpgrade python3-develUpgrade libpython2_7-1_0-32bitUpgrade python-docUpgrade python3-32bit | Aug 13, 2020 | Jul 13, 2020 |
| Ubuntu | — | Upgrade python3.6Upgrade python3.8-minimalUpgrade python3.7Upgrade python3.6-minimal (Ubuntu Pro)Upgrade python3.7 (Ubuntu Pro)Upgrade python3.5-minimal (Ubuntu Pro)Upgrade python3.7-minimal (Ubuntu Pro)Upgrade python3.6-minimalUpgrade python2.7Upgrade python3.8-minimal (Ubuntu Pro)Upgrade python2.7-minimal (Ubuntu Pro)Upgrade python3.5 (Ubuntu Pro)Upgrade python2.7-minimalUpgrade python3.4-minimal (Ubuntu Pro)Upgrade python3.8Upgrade python2.7 (Ubuntu Pro)Upgrade python3.5-minimalUpgrade python3.7-minimalUpgrade python3.5Upgrade python3.4 (Ubuntu Pro)Upgrade python3.6 (Ubuntu Pro)Upgrade python3.8 (Ubuntu Pro) | Aug 5, 2020 | Jul 13, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 13, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub