CVE search results

91 – 97 of 97 results

Detailed view

Sort by:

CVE-2011-1015

Low priority

Some fixes available 5 of 7

The is_cgi method in CGIHTTPServer.py in the CGIHTTPServer module in Python 2.5, 2.6, and 3.0 allows remote attackers to read script source code via an HTTP GET request that lacks a / (slash) character at the beginning of the URI.

4 affected packages

python2.4, python2.5, python2.6, python2.7

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
python2.4	—	—	—	—
python2.5	—	—	—	—
python2.6	—	—	—	—
python2.7	—	—	—	—

CVE-2010-3492

Negligible priority

Ignored

The asyncore module in Python before 3.2 does not properly handle unsuccessful calls to the accept function, and does not have accompanying documentation describing how daemon applications should handle unsuccessful calls to the...

4 affected packages

python2.6, python2.7, python3.1, python3.2

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
python2.6	—	—	—	—
python2.7	—	—	—	—
python3.1	—	—	—	—
python3.2	—	—	—	—

CVE-2010-3493

Negligible priority

Some fixes available 4 of 7

Multiple race conditions in smtpd.py in the smtpd module in Python 2.6, 2.7, 3.1, and 3.2 alpha allow remote attackers to cause a denial of service (daemon outage) by establishing and then immediately closing a TCP connection,...

6 affected packages

python2.4, python2.5, python2.6, python2.7, python3.1, python3.2

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
python2.4	—	—	—	—
python2.5	—	—	—	—
python2.6	—	—	—	—
python2.7	—	—	—	—
python3.1	—	—	—	—
python3.2	—	—	—	—

CVE-2010-2089

Low priority

Some fixes available 4 of 11

The audioop module in Python 2.7 and 3.2 does not verify the relationships between size arguments and byte string lengths, which allows context-dependent attackers to cause a denial of service (memory corruption and application...

6 affected packages

python2.4, python2.5, python2.6, python2.7, python3.1, python3.2

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
python2.4	—	—	—	—
python2.5	—	—	—	—
python2.6	—	—	—	—
python2.7	—	—	—	—
python3.1	—	—	—	—
python3.2	—	—	—	—

CVE-2010-1634

Low priority

Some fixes available 4 of 11

Multiple integer overflows in audioop.c in the audioop module in Python 2.6, 2.7, 3.1, and 3.2 allow context-dependent attackers to cause a denial of service (application crash) via a large fragment, as demonstrated by a call to...

6 affected packages

python2.4, python2.5, python2.6, python2.7, python3.1, python3.2

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
python2.4	—	—	—	—
python2.5	—	—	—	—
python2.6	—	—	—	—
python2.7	—	—	—	—
python3.1	—	—	—	—
python3.2	—	—	—	—

CVE-2008-5983

Low priority

Some fixes available 4 of 14

Untrusted search path vulnerability in the PySys_SetArgv API function in Python 2.6 and earlier, and possibly later versions, prepends an empty string to sys.path when the argv[0] argument does not contain a path separator, which...

6 affected packages

python2.4, python2.5, python2.6, python2.7, python3.1, python3.2

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
python2.4	—	—	—	—
python2.5	—	—	—	—
python2.6	—	—	—	—
python2.7	—	—	—	—
python3.1	—	—	—	—
python3.2	—	—	—	—

CVE-2007-4559

Medium priority

Some fixes available 2 of 30

Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR...

16 affected packages

python2.3, python2.4, python2.5, python2.6, python2.7...

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
python2.3	—	—	—	—
python2.4	—	—	—	—
python2.5	—	—	—	—
python2.6	—	—	—	—
python2.7	—	Ignored	Ignored	Ignored
python3.0	—	—	—	—
python3.1	—	—	—	—
python3.10	—	Fixed	Not in release	Not in release
python3.11	—	Ignored	Not in release	Not in release
python3.12	—	Not in release	Not in release	Not in release
python3.4	—	Not in release	Not in release	Not in release
python3.5	—	Not in release	Not in release	Not in release
python3.6	—	Not in release	Not in release	Ignored
python3.7	—	Not in release	Not in release	Ignored
python3.8	—	Not in release	Ignored	Ignored
python3.9	—	Not in release	Ignored	Not in release

Export to JSON

Results by page:

Search CVE reports