Rapid7 Vulnerability & Exploit Database

Oracle Linux: (CVE-2022-0391) (Multiple Advisories): python27:2.7 security update

Back to Search

Oracle Linux: (CVE-2022-0391) (Multiple Advisories): python27:2.7 security update

Severity

CVSS

(AV:N/AC:L/Au:N/C:N/I:P/A:N)

Published

02/09/2022

Created

05/20/2022

Added

05/18/2022

Modified

05/18/2022

Description

A flaw was found in Python, specifically within the urllib.parse module. This module helps break Uniform Resource Locator (URL) strings into components. The issue involves how the urlparse method does not sanitize input and allows characters like '\r' and '\n' in the URL path. This flaw allows an attacker to input a crafted URL, leading to injection attacks. This flaw affects Python versions prior to 3.10.0b1, 3.9.5, 3.8.11, 3.7.11 and 3.6.14.

Solution(s)

oracle-linux-upgrade-babel
oracle-linux-upgrade-cython
oracle-linux-upgrade-mod_wsgi
oracle-linux-upgrade-numpy
oracle-linux-upgrade-pytest
oracle-linux-upgrade-python-asn1crypto
oracle-linux-upgrade-python-atomicwrites
oracle-linux-upgrade-python-attrs
oracle-linux-upgrade-python-backports
oracle-linux-upgrade-python-backports-ssl_match_hostname
oracle-linux-upgrade-python-cffi
oracle-linux-upgrade-python-chardet
oracle-linux-upgrade-python-coverage
oracle-linux-upgrade-python-cryptography
oracle-linux-upgrade-python-dns
oracle-linux-upgrade-python-docs
oracle-linux-upgrade-python-docutils
oracle-linux-upgrade-python-funcsigs
oracle-linux-upgrade-python-idna
oracle-linux-upgrade-python-ipaddress
oracle-linux-upgrade-python-jinja2
oracle-linux-upgrade-python-lxml
oracle-linux-upgrade-python-markupsafe
oracle-linux-upgrade-python-mock
oracle-linux-upgrade-python-more-itertools
oracle-linux-upgrade-python-nose
oracle-linux-upgrade-python-nose-docs
oracle-linux-upgrade-python-packaging
oracle-linux-upgrade-python-pluggy
oracle-linux-upgrade-python-ply
oracle-linux-upgrade-python-psutil
oracle-linux-upgrade-python-psycopg2
oracle-linux-upgrade-python-psycopg2-doc
oracle-linux-upgrade-python-py
oracle-linux-upgrade-python-pycparser
oracle-linux-upgrade-python-pygments
oracle-linux-upgrade-python-pymongo
oracle-linux-upgrade-python-pymysql
oracle-linux-upgrade-python-pysocks
oracle-linux-upgrade-python-pytest-mock
oracle-linux-upgrade-python-requests
oracle-linux-upgrade-python-setuptools_scm
oracle-linux-upgrade-python-sqlalchemy
oracle-linux-upgrade-python-sqlalchemy-doc
oracle-linux-upgrade-python-urllib3
oracle-linux-upgrade-python-virtualenv
oracle-linux-upgrade-python-wcwidth
oracle-linux-upgrade-python-wheel
oracle-linux-upgrade-python2
oracle-linux-upgrade-python2-attrs
oracle-linux-upgrade-python2-babel
oracle-linux-upgrade-python2-backports
oracle-linux-upgrade-python2-backports-ssl_match_hostname
oracle-linux-upgrade-python2-bson
oracle-linux-upgrade-python2-chardet
oracle-linux-upgrade-python2-coverage
oracle-linux-upgrade-python2-cython
oracle-linux-upgrade-python2-debug
oracle-linux-upgrade-python2-devel
oracle-linux-upgrade-python2-dns
oracle-linux-upgrade-python2-docs
oracle-linux-upgrade-python2-docs-info
oracle-linux-upgrade-python2-docutils
oracle-linux-upgrade-python2-funcsigs
oracle-linux-upgrade-python2-idna
oracle-linux-upgrade-python2-ipaddress
oracle-linux-upgrade-python2-jinja2
oracle-linux-upgrade-python2-libs
oracle-linux-upgrade-python2-lxml
oracle-linux-upgrade-python2-markupsafe
oracle-linux-upgrade-python2-mock
oracle-linux-upgrade-python2-nose
oracle-linux-upgrade-python2-numpy
oracle-linux-upgrade-python2-numpy-doc
oracle-linux-upgrade-python2-numpy-f2py
oracle-linux-upgrade-python2-pip
oracle-linux-upgrade-python2-pip-wheel
oracle-linux-upgrade-python2-pluggy
oracle-linux-upgrade-python2-psycopg2
oracle-linux-upgrade-python2-psycopg2-debug
oracle-linux-upgrade-python2-psycopg2-tests
oracle-linux-upgrade-python2-py
oracle-linux-upgrade-python2-pygments
oracle-linux-upgrade-python2-pymongo
oracle-linux-upgrade-python2-pymongo-gridfs
oracle-linux-upgrade-python2-pymysql
oracle-linux-upgrade-python2-pysocks
oracle-linux-upgrade-python2-pytest
oracle-linux-upgrade-python2-pytest-mock
oracle-linux-upgrade-python2-pytz
oracle-linux-upgrade-python2-pyyaml
oracle-linux-upgrade-python2-requests
oracle-linux-upgrade-python2-rpm-macros
oracle-linux-upgrade-python2-scipy
oracle-linux-upgrade-python2-setuptools
oracle-linux-upgrade-python2-setuptools-wheel
oracle-linux-upgrade-python2-setuptools_scm
oracle-linux-upgrade-python2-six
oracle-linux-upgrade-python2-sqlalchemy
oracle-linux-upgrade-python2-test
oracle-linux-upgrade-python2-tkinter
oracle-linux-upgrade-python2-tools
oracle-linux-upgrade-python2-urllib3
oracle-linux-upgrade-python2-virtualenv
oracle-linux-upgrade-python2-wheel
oracle-linux-upgrade-python2-wheel-wheel
oracle-linux-upgrade-python38
oracle-linux-upgrade-python38-asn1crypto
oracle-linux-upgrade-python38-atomicwrites
oracle-linux-upgrade-python38-attrs
oracle-linux-upgrade-python38-babel
oracle-linux-upgrade-python38-cffi
oracle-linux-upgrade-python38-chardet
oracle-linux-upgrade-python38-cryptography
oracle-linux-upgrade-python38-cython
oracle-linux-upgrade-python38-debug
oracle-linux-upgrade-python38-devel
oracle-linux-upgrade-python38-idle
oracle-linux-upgrade-python38-idna
oracle-linux-upgrade-python38-jinja2
oracle-linux-upgrade-python38-libs
oracle-linux-upgrade-python38-lxml
oracle-linux-upgrade-python38-markupsafe
oracle-linux-upgrade-python38-mod_wsgi
oracle-linux-upgrade-python38-more-itertools
oracle-linux-upgrade-python38-numpy
oracle-linux-upgrade-python38-numpy-doc
oracle-linux-upgrade-python38-numpy-f2py
oracle-linux-upgrade-python38-packaging
oracle-linux-upgrade-python38-pip
oracle-linux-upgrade-python38-pip-wheel
oracle-linux-upgrade-python38-pluggy
oracle-linux-upgrade-python38-ply
oracle-linux-upgrade-python38-psutil
oracle-linux-upgrade-python38-psycopg2
oracle-linux-upgrade-python38-psycopg2-doc
oracle-linux-upgrade-python38-psycopg2-tests
oracle-linux-upgrade-python38-py
oracle-linux-upgrade-python38-pycparser
oracle-linux-upgrade-python38-pymysql
oracle-linux-upgrade-python38-pyparsing
oracle-linux-upgrade-python38-pysocks
oracle-linux-upgrade-python38-pytest
oracle-linux-upgrade-python38-pytz
oracle-linux-upgrade-python38-pyyaml
oracle-linux-upgrade-python38-requests
oracle-linux-upgrade-python38-rpm-macros
oracle-linux-upgrade-python38-scipy
oracle-linux-upgrade-python38-setuptools
oracle-linux-upgrade-python38-setuptools-wheel
oracle-linux-upgrade-python38-six
oracle-linux-upgrade-python38-test
oracle-linux-upgrade-python38-tkinter
oracle-linux-upgrade-python38-urllib3
oracle-linux-upgrade-python38-wcwidth
oracle-linux-upgrade-python38-wheel
oracle-linux-upgrade-python38-wheel-wheel
oracle-linux-upgrade-python3x-pip
oracle-linux-upgrade-python3x-pyparsing
oracle-linux-upgrade-python3x-setuptools
oracle-linux-upgrade-python3x-six
oracle-linux-upgrade-pytz
oracle-linux-upgrade-pyyaml
oracle-linux-upgrade-scipy

References

ELSA-2022-1821
CVE-2022-0391
USN-5342-1

Advanced vulnerability management analytics and reporting.

Key Features

Free InsightVM Trial View All Features

With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.

– Scott Cheney, Manager of Information Security, Sierra View Medical Center

;

Rapid7 Vulnerability & Exploit Database

Oracle Linux: (CVE-2022-0391) (Multiple Advisories): python27:2.7 security update