The pip package before 19.2 for Python allows Directory Traversal when a URL is given in an install command, because a Content-Disposition header can have ../ in a filename, as demonstrated by overwriting the /root/.ssh/authorized_keys file. This occurs in _download_http_url in _internal/download.py.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python2-dnsUpgrade python2-markupsafeUpgrade python2-coverageUpgrade python2-pysocksUpgrade python2-attrsUpgrade python2-idnaUpgrade python2-PyMySQLUpgrade python2-pytest-mockUpgrade python2-ipaddressUpgrade python2-pytzUpgrade python2-pyUpgrade python2-funcsigsUpgrade python2-docs-infoUpgrade python2-CythonUpgrade python2-sqlalchemyUpgrade python2-pluggyUpgrade python2-requestsUpgrade python2-docutilsUpgrade python2-setuptools_scmUpgrade python2-psycopg2Upgrade python-sqlalchemy-docUpgrade python2-psycopg2-debugUpgrade python-psycopg2-docUpgrade python2-rpm-macrosUpgrade python2-chardetUpgrade python2-mockUpgrade python2-pyyamlUpgrade python2-psycopg2-testsUpgrade python2-pytestUpgrade python2-docs | May 4, 2022 | Sep 4, 2020 |
| Amazon Linux Ami 2 | — | Upgrade python3-pipUpgrade python-pip-wheelUpgrade python2-pip | May 26, 2021 | Sep 4, 2020 |
| Centos_linux | — | Upgrade python2-sqlalchemyUpgrade python2-setuptools_scmUpgrade python2-pytest-mockUpgrade python2-pymongo-gridfsUpgrade python2-attrsUpgrade python2-pymongoUpgrade python2-psycopg2-debuginfoUpgrade python2-lxmlUpgrade python2-develUpgrade python2-debuginfoUpgrade python2-pip-wheelUpgrade python-coverage-debugsourceUpgrade python2-mockUpgrade python2-testUpgrade python2Upgrade python2-psycopg2-testsUpgrade python2-pymongo-debuginfoUpgrade python2-psycopg2-debugUpgrade python2-dnsUpgrade python3-pipUpgrade python2-docs-infoUpgrade python2-bsonUpgrade python2-pysocksUpgrade python2-tkinterUpgrade python2-rpm-macrosUpgrade python2-backportsUpgrade python2-pygmentsUpgrade python3-pip-wheelUpgrade python2-wheel-wheelUpgrade python2-pytestUpgrade python2-numpy-docUpgrade python2-PyMySQLUpgrade python2-docsUpgrade scipy-debugsourceUpgrade python2-pytzUpgrade python2-requestsUpgrade python2-funcsigsUpgrade python2-scipyUpgrade PyYAML-debugsourceUpgrade python2-debugsourceUpgrade python2-markupsafeUpgrade python2-docutilsUpgrade python-sqlalchemy-docUpgrade python2-setuptoolsUpgrade python2-wheelUpgrade python2-toolsUpgrade python2-numpyUpgrade numpy-debugsourceUpgrade python2-virtualenvUpgrade babelUpgrade python2-scipy-debuginfoUpgrade python2-babelUpgrade python-pymongo-debuginfoUpgrade python2-setuptools-wheelUpgrade python2-debugUpgrade python2-coverage-debuginfoUpgrade python2-jinja2Upgrade python2-pluggyUpgrade python2-pipUpgrade python2-numpy-debuginfoUpgrade python2-numpy-f2pyUpgrade python2-pyyaml-debuginfoUpgrade python2-urllib3Upgrade python-nose-docsUpgrade python2-noseUpgrade python2-pyyamlUpgrade Cython-debugsourceUpgrade python2-psycopg2Upgrade python2-coverageUpgrade python2-bson-debuginfoUpgrade python2-psycopg2-debug-debuginfoUpgrade python-pymongo-debugsourceUpgrade python2-libsUpgrade python2-CythonUpgrade python2-sixUpgrade python2-idnaUpgrade python2-chardetUpgrade python-psycopg2-debugsourceUpgrade platform-python-pipUpgrade python2-pyUpgrade python-psycopg2-docUpgrade python2-lxml-debuginfoUpgrade python-lxml-debugsourceUpgrade python-virtualenvUpgrade python2-Cython-debuginfoUpgrade python2-backports-ssl_match_hostnameUpgrade python2-ipaddressUpgrade python-psycopg2-debuginfo | Nov 5, 2020 | Sep 4, 2020 |
| Debian | — | Upgrade python-pip | Sep 14, 2020 | Sep 4, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-pipUpgrade python3-pipUpgrade python2-pipUpgrade python-pip-wheel | Nov 3, 2020 | Sep 4, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python-pipUpgrade python3-pipUpgrade python-pip-wheel | Dec 1, 2020 | Sep 4, 2020 |
| Oracle Solaris | — | Upgrade library/python/pip-39 to version 20.2.4-11.4.30.0.1.88.0 on Solaris 11.4Upgrade library/python/pip-35 to version 19.1.1-11.4.30.0.0.88.0 on Solaris 11.4Upgrade library/python/pip-37 to version 20.2.4-11.4.30.0.1.88.0 on Solaris 11.4Upgrade library/python/pip-27 to version 20.2.4-11.4.30.0.1.88.0 on Solaris 11.4Upgrade legacy/library/python/pip-35 to version 19.1.1-11.4.30.0.0.88.0 on Solaris 11.4Upgrade library/python/pip to version 20.2.4-11.4.30.0.1.88.0 on Solaris 11.4 | Feb 17, 2021 | Sep 4, 2020 |
| Oracle_linux | — | Upgrade python2-ipaddressUpgrade python2-numpyUpgrade python2-setuptools_scmUpgrade python3-pip-wheelUpgrade python2-pytestUpgrade python2-pytest-mockUpgrade python2-dnsUpgrade python2-toolsUpgrade python2-develUpgrade python2-numpy-docUpgrade python2-pygmentsUpgrade python2-sqlalchemyUpgrade python2-pyUpgrade python2-pip-wheelUpgrade python2-pysocksUpgrade python2-backportsUpgrade python2-pluggyUpgrade python2-testUpgrade python2-setuptoolsUpgrade python2-pymongoUpgrade python2-PyMySQLUpgrade python2-bsonUpgrade python2-coverageUpgrade python2-docutilsUpgrade python2-debugUpgrade python2-attrsUpgrade python2Upgrade python2-scipyUpgrade python-sqlalchemy-docUpgrade python2-requestsUpgrade python2-libsUpgrade python2-pymongo-gridfsUpgrade python2-tkinterUpgrade python2-lxmlUpgrade babelUpgrade python2-psycopg2Upgrade python2-docs-infoUpgrade python2-idnaUpgrade python2-CythonUpgrade python2-docsUpgrade python2-funcsigsUpgrade python2-virtualenvUpgrade python2-markupsafeUpgrade python2-urllib3Upgrade python2-babelUpgrade python2-rpm-macrosUpgrade python2-backports-ssl_match_hostnameUpgrade python-nose-docsUpgrade python2-psycopg2-testsUpgrade python3-pipUpgrade python2-chardetUpgrade python2-wheel-wheelUpgrade python2-sixUpgrade python-virtualenvUpgrade python2-psycopg2-debugUpgrade python2-wheelUpgrade python2-numpy-f2pyUpgrade python2-mockUpgrade python2-noseUpgrade python2-pytzUpgrade python2-jinja2Upgrade python2-pipUpgrade python-psycopg2-docUpgrade python2-setuptools-wheelUpgrade platform-python-pipUpgrade python2-pyyaml | Nov 12, 2020 | Apr 16, 2019 |
| Redhat_linux | — | Upgrade python2-scipy-debuginfoUpgrade python2-lxml-debuginfoUpgrade python2-sixUpgrade python2-pyyamlUpgrade python2-numpy-debuginfoUpgrade python2-sqlalchemyUpgrade python2-pytest-mockUpgrade python2-pluggyUpgrade python2-CythonUpgrade python2-setuptools-wheelUpgrade python2-numpy-f2pyUpgrade python2-dnsUpgrade python2-psycopg2-debug-debuginfoUpgrade python2-docutilsUpgrade python2-debugsourceUpgrade python2-coverageUpgrade python-virtualenvUpgrade python2-psycopg2Upgrade python-nose-docsUpgrade python2-mockUpgrade python-lxml-debugsourceUpgrade python2-toolsUpgrade python2-bsonUpgrade python2-pymongo-debuginfoUpgrade python-psycopg2-debuginfoUpgrade python2-bson-debuginfoUpgrade Cython-debugsourceUpgrade python2-babelUpgrade python2-debugUpgrade python-pymongo-debuginfoUpgrade python2-ipaddressUpgrade babelUpgrade python2-develUpgrade python-psycopg2-debugsourceUpgrade python2-scipyUpgrade platform-python-pipUpgrade python2-idnaUpgrade python2-PyMySQLUpgrade python2-libsUpgrade python2-funcsigsUpgrade python2-Cython-debuginfoUpgrade python2-psycopg2-testsUpgrade python2-pipUpgrade python2-noseUpgrade python2-rpm-macrosUpgrade python2-docsUpgrade python2-psycopg2-debuginfoUpgrade python2-pip-wheelNo solution existsUpgrade python2-requestsUpgrade python2Upgrade python2-wheelUpgrade python2-markupsafeUpgrade PyYAML-debugsourceUpgrade python-sqlalchemy-docUpgrade python2-docs-infoUpgrade python2-lxmlUpgrade python2-pyUpgrade python3-pipUpgrade python-coverage-debugsourceUpgrade python2-setuptools_scmUpgrade python2-psycopg2-debugUpgrade python2-pymongoUpgrade python2-numpy-docUpgrade python2-pygmentsUpgrade scipy-debugsourceUpgrade python2-virtualenvUpgrade python2-backports-ssl_match_hostnameUpgrade python2-urllib3Upgrade python2-pytzUpgrade python2-pyyaml-debuginfoUpgrade python2-numpyUpgrade python2-setuptoolsUpgrade python2-attrsUpgrade python2-pymongo-gridfsUpgrade python2-pysocksUpgrade python2-chardetUpgrade python-psycopg2-docUpgrade python2-jinja2Upgrade python2-tkinterUpgrade python2-pytestUpgrade python-pymongo-debugsourceUpgrade numpy-debugsourceUpgrade python2-backportsUpgrade python2-wheel-wheelUpgrade python3-pip-wheelUpgrade python2-debuginfoUpgrade python2-testUpgrade python2-coverage-debuginfo | Nov 5, 2020 | Sep 4, 2020 |
| Rocky_linux | — | Upgrade python2-sqlalchemyUpgrade PyYAML-debugsourceUpgrade python2-bsonUpgrade python2-pymongo-gridfsUpgrade python-pymongo-debugsourceUpgrade python2-markupsafeUpgrade python2-Cython-debuginfoUpgrade python2-psycopg2-debuginfoUpgrade python2-coverage-debuginfoUpgrade python2-CythonUpgrade python2-psycopg2-debugUpgrade python-coverage-debugsourceUpgrade python2-psycopg2-debug-debuginfoUpgrade python2-pymongoUpgrade python-pymongo-debuginfoUpgrade python2-psycopg2Upgrade python-psycopg2-docUpgrade python2-scipy-debuginfoUpgrade scipy-debugsourceUpgrade python2-pyyamlUpgrade python-psycopg2-debuginfoUpgrade Cython-debugsourceUpgrade python2-psycopg2-testsUpgrade python-psycopg2-debugsourceUpgrade python2-scipyUpgrade python2-pyyaml-debuginfoUpgrade python2-coverageUpgrade python2-pymongo-debuginfoUpgrade python2-bson-debuginfo | Mar 12, 2024 | Sep 4, 2020 |
| Suse | — | Upgrade python3-testsuiteUpgrade python2-setuptoolsUpgrade python39-pipUpgrade python-gdbmUpgrade python3-cursesUpgrade libpython3_4m1_0Upgrade python39-setuptoolsUpgrade python-pipUpgrade python2-setuptools-testUpgrade python-develUpgrade python-cursesUpgrade libpython3_6m1_0Upgrade python-32bitUpgrade python3-setuptools-wheelUpgrade python3-tkUpgrade libpython3_6m1_0-32bitUpgrade python3-32bitUpgrade python3-base-32bitUpgrade python-setuptoolsUpgrade python-xmlUpgrade python36-baseUpgrade python36Upgrade python3-docUpgrade python3-pipUpgrade python3-toolsUpgrade python-doc-pdfUpgrade python3-idleUpgrade libpython2_7-1_0Upgrade libpython2_7-1_0-32bitUpgrade python-idleUpgrade python3-pip-wheelUpgrade python3-develUpgrade python-tkUpgrade python3-baseUpgrade python2-setuptools-wheelUpgrade python3Upgrade python-base-32bitUpgrade pythonUpgrade libpython3_4m1_0-32bitUpgrade python3-dbmUpgrade python3-setuptools-testUpgrade python2-pip-wheelUpgrade python3-setuptoolsUpgrade python-docUpgrade python-baseUpgrade python-demoUpgrade python3-doc-devhelpUpgrade python2-pip | Oct 1, 2020 | Sep 4, 2020 |
| Ubuntu | — | Upgrade python-pipUpgrade python3-pip | Oct 23, 2020 | Sep 4, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub