The pip package before 19.2 for Python allows Directory Traversal when a URL is given in an install command, because a Content-Disposition header can have ../ in a filename, as demonstrated by overwriting the /root/.ssh/authorized_keys file. This occurs in _download_http_url in _internal/download.py.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python2-funcsigsUpgrade python2-setuptools_scmUpgrade python2-ipaddressUpgrade python2-coverageUpgrade python2-markupsafeUpgrade python2-docutilsUpgrade python2-sqlalchemyUpgrade python2-pysocksUpgrade python2-dnsUpgrade python2-pytest-mockUpgrade python2-pytzUpgrade python2-attrsUpgrade python2-docs-infoUpgrade python2-idnaUpgrade python-sqlalchemy-docUpgrade python2-pyUpgrade python2-psycopg2Upgrade python2-PyMySQLUpgrade python2-requestsUpgrade python2-CythonUpgrade python2-pluggyUpgrade python2-psycopg2-debugUpgrade python2-psycopg2-testsUpgrade python2-chardetUpgrade python2-pyyamlUpgrade python2-pytestUpgrade python-psycopg2-docUpgrade python2-docsUpgrade python2-mockUpgrade python2-rpm-macros | May 4, 2022 | Sep 4, 2020 |
| Amazon Linux Ami 2 | — | Upgrade python2-pipUpgrade python-pip-wheelUpgrade python3-pip | May 26, 2021 | Sep 4, 2020 |
| Centos_linux | — | Upgrade python2-pyyamlUpgrade python2-psycopg2-debug-debuginfoUpgrade python2-coverageUpgrade python-psycopg2-docUpgrade python2-sixUpgrade python2-scipy-debuginfoUpgrade python2-psycopg2Upgrade Cython-debugsourceUpgrade python2-CythonUpgrade python-pymongo-debugsourceUpgrade python2-pipUpgrade python2-pyyaml-debuginfoUpgrade python-lxml-debugsourceUpgrade python2-pyUpgrade python2-chardetUpgrade python-psycopg2-debugsourceUpgrade platform-python-pipUpgrade python2-pluggyUpgrade python2-bson-debuginfoUpgrade python2-coverage-debuginfoUpgrade python2-idnaUpgrade python-virtualenvUpgrade python2-numpy-f2pyUpgrade python-psycopg2-debuginfoUpgrade python2-setuptools-wheelUpgrade python2-backports-ssl_match_hostnameUpgrade python-nose-docsUpgrade python2-ipaddressUpgrade python2-Cython-debuginfoUpgrade python2-debugUpgrade python2-urllib3Upgrade python2-libsUpgrade python2-noseUpgrade python2-numpy-debuginfoUpgrade python-pymongo-debuginfoUpgrade python2-babelUpgrade python3-pip-wheelUpgrade scipy-debugsourceUpgrade python2-wheel-wheelUpgrade python2-lxml-debuginfoUpgrade python-coverage-debugsourceUpgrade python2-bsonUpgrade python2-pytest-mockUpgrade python2-pymongo-gridfsUpgrade python2-virtualenvUpgrade numpy-debugsourceUpgrade python2-setuptools_scmUpgrade python2-pip-wheelUpgrade python2-debugsourceUpgrade python2Upgrade python2-mockUpgrade python2-requestsUpgrade python2-psycopg2-testsUpgrade python2-jinja2Upgrade python2-docutilsUpgrade python2-pytzUpgrade python2-funcsigsUpgrade python2-docsUpgrade PyYAML-debugsourceUpgrade python2-debuginfoUpgrade python2-pymongo-debuginfoUpgrade python2-wheelUpgrade python2-setuptoolsUpgrade python2-numpy-docUpgrade python2-lxmlUpgrade python2-develUpgrade python2-scipyUpgrade python2-PyMySQLUpgrade python2-toolsUpgrade python2-backportsUpgrade python2-psycopg2-debuginfoUpgrade python2-markupsafeUpgrade python2-attrsUpgrade python2-sqlalchemyUpgrade python2-pytestUpgrade python2-rpm-macrosUpgrade python2-docs-infoUpgrade python2-dnsUpgrade python2-pygmentsUpgrade python2-testUpgrade python2-numpyUpgrade babelUpgrade python2-pysocksUpgrade python-sqlalchemy-docUpgrade python2-tkinterUpgrade python2-psycopg2-debugUpgrade python3-pipUpgrade python2-pymongo | Nov 5, 2020 | Sep 4, 2020 |
| Debian | — | Upgrade python-pip | Sep 14, 2020 | Sep 4, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-pipUpgrade python-pipUpgrade python2-pipUpgrade python-pip-wheel | Nov 3, 2020 | Sep 4, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python-pip-wheelUpgrade python3-pipUpgrade python-pip | Dec 1, 2020 | Sep 4, 2020 |
| Oracle Solaris | — | Upgrade library/python/pip-39 to version 20.2.4-11.4.30.0.1.88.0 on Solaris 11.4Upgrade library/python/pip-35 to version 19.1.1-11.4.30.0.0.88.0 on Solaris 11.4Upgrade library/python/pip-27 to version 20.2.4-11.4.30.0.1.88.0 on Solaris 11.4Upgrade library/python/pip-37 to version 20.2.4-11.4.30.0.1.88.0 on Solaris 11.4Upgrade library/python/pip to version 20.2.4-11.4.30.0.1.88.0 on Solaris 11.4Upgrade legacy/library/python/pip-35 to version 19.1.1-11.4.30.0.0.88.0 on Solaris 11.4 | Feb 17, 2021 | Sep 4, 2020 |
| Oracle_linux | — | Upgrade python2-urllib3Upgrade python2-wheel-wheelUpgrade python2-chardetUpgrade python2-sixUpgrade python2-numpy-f2pyUpgrade python3-pipUpgrade python2-mockUpgrade platform-python-pipUpgrade python2-backports-ssl_match_hostnameUpgrade python-virtualenvUpgrade python2-jinja2Upgrade python2-pipUpgrade python2-psycopg2-debugUpgrade python2-noseUpgrade python2-setuptools-wheelUpgrade python2-pytzUpgrade python-psycopg2-docUpgrade python2-psycopg2-testsUpgrade python2-pyyamlUpgrade python2-wheelUpgrade python2-babelUpgrade python2-rpm-macrosUpgrade python-nose-docsUpgrade python2-setuptools_scmUpgrade python2-markupsafeUpgrade python2-bsonUpgrade python2-attrsUpgrade python2-virtualenvUpgrade python2-docs-infoUpgrade python2-pip-wheelUpgrade python2-sqlalchemyUpgrade python2-pyUpgrade python2-numpyUpgrade python2-ipaddressUpgrade python3-pip-wheelUpgrade python2-pymongoUpgrade python2-idnaUpgrade babelUpgrade python2-toolsUpgrade python2-requestsUpgrade python2-pymongo-gridfsUpgrade python2-psycopg2Upgrade python2-setuptoolsUpgrade python-sqlalchemy-docUpgrade python2-develUpgrade python2-pytestUpgrade python2-pygmentsUpgrade python2-numpy-docUpgrade python2-pytest-mockUpgrade python2-lxmlUpgrade python2-docsUpgrade python2-CythonUpgrade python2-tkinterUpgrade python2-libsUpgrade python2-funcsigsUpgrade python2-pysocksUpgrade python2-dnsUpgrade python2-backportsUpgrade python2-pluggyUpgrade python2-PyMySQLUpgrade python2-scipyUpgrade python2Upgrade python2-docutilsUpgrade python2-debugUpgrade python2-testUpgrade python2-coverage | Nov 12, 2020 | Apr 16, 2019 |
| Redhat_linux | — | Upgrade python2-wheelUpgrade python2-jinja2Upgrade python2-wheel-wheelUpgrade python2-setuptoolsUpgrade python2-markupsafeUpgrade python3-pip-wheelUpgrade python2-setuptools_scmUpgrade python2-pygmentsUpgrade python3-pipUpgrade PyYAML-debugsourceUpgrade python2-lxmlUpgrade python2Upgrade python2-numpyUpgrade python2-testUpgrade python2-debuginfoUpgrade python2-tkinterUpgrade python2-requestsUpgrade python2-attrsNo solution existsUpgrade python2-psycopg2-debuginfoUpgrade numpy-debugsourceUpgrade python2-pymongo-gridfsUpgrade python2-pip-wheelUpgrade python2-backportsUpgrade python2-psycopg2-debugUpgrade python2-virtualenvUpgrade python2-backports-ssl_match_hostnameUpgrade python2-pyUpgrade python2-pymongoUpgrade python-sqlalchemy-docUpgrade python-coverage-debugsourceUpgrade python2-numpy-docUpgrade python2-coverage-debuginfoUpgrade python2-pytestUpgrade python2-docs-infoUpgrade python-pymongo-debugsourceUpgrade python2-urllib3Upgrade scipy-debugsourceUpgrade python2-pytzUpgrade python2-chardetUpgrade python2-pysocksUpgrade python2-pyyaml-debuginfoUpgrade python-psycopg2-docUpgrade python2-PyMySQLUpgrade python2-numpy-debuginfoUpgrade python2-idnaUpgrade python-virtualenvUpgrade python-nose-docsUpgrade python2-debugsourceUpgrade python2-lxml-debuginfoUpgrade python2-sqlalchemyUpgrade python2-dnsUpgrade python2-docutilsUpgrade python2-scipy-debuginfoUpgrade python2-psycopg2Upgrade python2-pluggyUpgrade python2-mockUpgrade python2-pyyamlUpgrade python-lxml-debugsourceUpgrade python2-docsUpgrade babelUpgrade python2-toolsUpgrade python2-Cython-debuginfoUpgrade python-psycopg2-debuginfoUpgrade python2-setuptools-wheelUpgrade python2-libsUpgrade python2-noseUpgrade python2-pytest-mockUpgrade python2-CythonUpgrade python2-psycopg2-testsUpgrade python2-funcsigsUpgrade python2-bsonUpgrade platform-python-pipUpgrade python-pymongo-debuginfoUpgrade python2-babelUpgrade python2-pipUpgrade python2-psycopg2-debug-debuginfoUpgrade python2-coverageUpgrade Cython-debugsourceUpgrade python2-scipyUpgrade python2-sixUpgrade python2-develUpgrade python2-bson-debuginfoUpgrade python2-numpy-f2pyUpgrade python2-rpm-macrosUpgrade python-psycopg2-debugsourceUpgrade python2-ipaddressUpgrade python2-pymongo-debuginfoUpgrade python2-debug | Nov 5, 2020 | Sep 4, 2020 |
| Rocky_linux | — | Upgrade scipy-debugsourceUpgrade python2-psycopg2Upgrade python-psycopg2-docUpgrade python2-psycopg2-testsUpgrade python-pymongo-debuginfoUpgrade python2-pyyamlUpgrade python2-bson-debuginfoUpgrade python2-scipy-debuginfoUpgrade python2-pymongo-debuginfoUpgrade python2-pyyaml-debuginfoUpgrade python2-pymongoUpgrade python2-coverageUpgrade Cython-debugsourceUpgrade python2-scipyUpgrade python-psycopg2-debugsourceUpgrade python-psycopg2-debuginfoUpgrade python-coverage-debugsourceUpgrade python2-psycopg2-debuginfoUpgrade python-pymongo-debugsourceUpgrade python2-markupsafeUpgrade python2-psycopg2-debug-debuginfoUpgrade python2-Cython-debuginfoUpgrade python2-coverage-debuginfoUpgrade python2-psycopg2-debugUpgrade python2-sqlalchemyUpgrade PyYAML-debugsourceUpgrade python2-pymongo-gridfsUpgrade python2-CythonUpgrade python2-bson | Mar 12, 2024 | Sep 4, 2020 |
| Suse | — | Upgrade python2-pip-wheelUpgrade python3-idleUpgrade python3-toolsUpgrade python3-pipUpgrade python2-pipUpgrade libpython2_7-1_0-32bitUpgrade libpython3_4m1_0-32bitUpgrade python3-doc-devhelpUpgrade python-base-32bitUpgrade python3Upgrade python3-baseUpgrade python3-setuptools-testUpgrade python3-docUpgrade python3-develUpgrade python2-setuptools-wheelUpgrade python-doc-pdfUpgrade libpython2_7-1_0Upgrade python-tkUpgrade python3-dbmUpgrade python3-pip-wheelUpgrade pythonUpgrade python-docUpgrade python-idleUpgrade python-demoUpgrade python3-setuptoolsUpgrade python-baseUpgrade python39-setuptoolsUpgrade python-pipUpgrade python-xmlUpgrade libpython3_6m1_0Upgrade python-gdbmUpgrade python-develUpgrade python3-tkUpgrade python39-pipUpgrade python36Upgrade libpython3_4m1_0Upgrade python3-32bitUpgrade python3-setuptools-wheelUpgrade python2-setuptools-testUpgrade python3-testsuiteUpgrade python-32bitUpgrade python2-setuptoolsUpgrade python36-baseUpgrade python3-base-32bitUpgrade python-cursesUpgrade libpython3_6m1_0-32bitUpgrade python3-cursesUpgrade python-setuptools | Oct 1, 2020 | Sep 4, 2020 |
| Ubuntu | — | Upgrade python-pipUpgrade python3-pip | Oct 23, 2020 | Sep 4, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub