Every CVE Search/ Get API key

CVE-2011-1521

The urllib and urllib2 modules in Python 2.x before 2.7.2 and 3.x before 3.2.1 process Location...

6.4 MediumFix available

The urllib and urllib2 modules in Python 2.x before 2.7.2 and 3.x before 3.2.1 process Location headers that specify redirection to file: URLs, which makes it easier for remote attackers to obtain sensitive information or cause a denial of service (resource consumption) via a crafted URL, as demonstrated by the file:///etc/passwd and file:///dev/zero URLs.

Exploit likelihood

3.56%Down 0.8 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 6.4

The urllib and urllib2 modules in Python 2.x before 2.7.2 and 3.x before 3.2.1 process Location headers that specify redirection to file: URLs, which makes it easier for remote attackers to obtain sensitive information or cause a denial of service (resource consumption) via a crafted URL, as demonstrated by the file:///etc/passwd and file:///dev/zero URLs.

Record
CVE-2011-1521
CVSS 2.0
6.4 MediumAV:N/AC:L/Au:N/C:P/I:N/A:P
Weakness
CWE-399
Updated
2026-11-02
CVE List No score

The urllib and urllib2 modules in Python 2.x before 2.7.2 and 3.x before 3.2.1 process Location headers that specify redirection to file: URLs, which makes it easier for remote attackers to obtain sensitive information or cause a denial of service (resource consumption) via a crafted URL, as demonstrated by the file:///etc/passwd and file:///dev/zero URLs.

Record
CVE-2011-1521
Updated
2026-11-02
EUVDEUVD-2011-1522 No score

The urllib and urllib2 modules in Python 2.x before 2.7.2 and 3.x before 3.2.1 process Location headers that specify redirection to file: URLs, which makes it easier for remote attackers to obtain sensitive information or cause a denial of service (resource consumption) via a crafted URL, as demonstrated by the file:///etc/passwd and file:///dev/zero URLs.

Record
EUVD-2011-1522
Updated
2026-11-03
GitHub AdvisoriesGHSA-cq22-fw8f-mvcw No score

The urllib and urllib2 modules in Python 2.x before 2.7.2 and 3.x before 3.2.1 process Location...

The urllib and urllib2 modules in Python 2.x before 2.7.2 and 3.x before 3.2.1 process Location headers that specify redirection to file: URLs, which makes it easier for remote attackers to obtain sensitive information or cause a denial of service (resource consumption) via a crafted URL, as demonstrated by the file:///etc/passwd and file:///dev/zero URLs.

Record
GHSA-cq22-fw8f-mvcw
Updated
2026-11-02
OSV No score

The urllib and urllib2 modules in Python 2.x before 2.7.2 and 3.x before 3.2.1 process Location headers that specify redirection to file: URLs, which makes it easier for remote attackers to obtain sensitive information or cause a denial of service (resource consumption) via a crafted URL, as demonstrated by the file:///etc/passwd and file:///dev/zero URLs.

Record
CVE-2011-1521
Updated
2026-11-02
OSVDEBIAN-CVE-2011-1521 No score

The urllib and urllib2 modules in Python 2.x before 2.7.2 and 3.x before 3.2.1 process Location headers that specify redirection to file: URLs, which makes it easier for remote attackers to obtain sensitive information or cause a denial of service (resource consumption) via a crafted URL, as demonstrated by the file:///etc/passwd and file:///dev/zero URLs.

Record
DEBIAN-CVE-2011-1521
Updated
2026-11-02
Show 4 moreShow less
OSVopenSUSE-SU-2024:10536-1 No score

libpython2_7-1_0-2.7.12-1.4 on GA media

These are all security issues fixed in the libpython2_7-1_0-2.7.12-1.4 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10536-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:11202-1 No score

python-2.7.18-8.1 on GA media

These are all security issues fixed in the python-2.7.18-8.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11202-1
Updated
2026-11-02
OSVPSF-2011-2 No score

urllib redirect

The urllib and urllib2 modules in Python 2.x before 2.7.2 and 3.x before 3.2.1 process Location headers that specify redirection to file: URLs, which makes it easier for remote attackers to obtain sensitive information or cause a denial of service (resource consumption) via a crafted URL, as demonstrated by the file:///etc/passwd and file:///dev/zero URLs.

Record
PSF-2011-2
Updated
2026-11-02
OSVSUSE-SU-2020:0234-1 No score

Security update for python

This update for python fixes the following issues:

Updated to version 2.7.17 to unify packages among openSUSE:Factory and SLE versions (bsc#1159035).

Record
SUSE-SU-2020:0234-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
python2.7
Debian:11
 before 2.7.1-7
2.7.1-7
python2.6
Debian:6.0
From an advisory covering 8 CVEs
 before 2.6.6-8+deb6u1, plus listed versions
2.6.6-8
2.6.6-8+deb6u1
python
Red Hat:enterprise_linux:4::as
From an advisory covering 6 CVEs
 before 0:2.3.4-14.10.el4
0:2.3.4-14.10.el4
python-debuginfo
Red Hat:enterprise_linux:4::as
From an advisory covering 6 CVEs
 before 0:2.3.4-14.10.el4
0:2.3.4-14.10.el4
python-devel
Red Hat:enterprise_linux:4::as
From an advisory covering 6 CVEs
 before 0:2.3.4-14.10.el4
0:2.3.4-14.10.el4
python-docs
Red Hat:enterprise_linux:4::as
From an advisory covering 6 CVEs
 before 0:2.3.4-14.10.el4
0:2.3.4-14.10.el4
python-tools
Red Hat:enterprise_linux:4::as
From an advisory covering 6 CVEs
 before 0:2.3.4-14.10.el4
0:2.3.4-14.10.el4
tkinter
Red Hat:enterprise_linux:4::as
From an advisory covering 6 CVEs
 before 0:2.3.4-14.10.el4
0:2.3.4-14.10.el4
python
Red Hat:enterprise_linux:4::desktop
From an advisory covering 6 CVEs
 before 0:2.3.4-14.10.el4
0:2.3.4-14.10.el4
python-debuginfo
Red Hat:enterprise_linux:4::desktop
From an advisory covering 6 CVEs
 before 0:2.3.4-14.10.el4
0:2.3.4-14.10.el4
Show 70 moreShow less
Affected packages
PackageAffectedFixed
python-devel
Red Hat:enterprise_linux:4::desktop
From an advisory covering 6 CVEs
 before 0:2.3.4-14.10.el4
0:2.3.4-14.10.el4
python-docs
Red Hat:enterprise_linux:4::desktop
From an advisory covering 6 CVEs
 before 0:2.3.4-14.10.el4
0:2.3.4-14.10.el4
python-tools
Red Hat:enterprise_linux:4::desktop
From an advisory covering 6 CVEs
 before 0:2.3.4-14.10.el4
0:2.3.4-14.10.el4
tkinter
Red Hat:enterprise_linux:4::desktop
From an advisory covering 6 CVEs
 before 0:2.3.4-14.10.el4
0:2.3.4-14.10.el4
python
Red Hat:enterprise_linux:4::es
From an advisory covering 6 CVEs
 before 0:2.3.4-14.10.el4
0:2.3.4-14.10.el4
python-debuginfo
Red Hat:enterprise_linux:4::es
From an advisory covering 6 CVEs
 before 0:2.3.4-14.10.el4
0:2.3.4-14.10.el4
python-devel
Red Hat:enterprise_linux:4::es
From an advisory covering 6 CVEs
 before 0:2.3.4-14.10.el4
0:2.3.4-14.10.el4
python-docs
Red Hat:enterprise_linux:4::es
From an advisory covering 6 CVEs
 before 0:2.3.4-14.10.el4
0:2.3.4-14.10.el4
python-tools
Red Hat:enterprise_linux:4::es
From an advisory covering 6 CVEs
 before 0:2.3.4-14.10.el4
0:2.3.4-14.10.el4
tkinter
Red Hat:enterprise_linux:4::es
From an advisory covering 6 CVEs
 before 0:2.3.4-14.10.el4
0:2.3.4-14.10.el4
python
Red Hat:enterprise_linux:4::ws
From an advisory covering 6 CVEs
 before 0:2.3.4-14.10.el4
0:2.3.4-14.10.el4
python-debuginfo
Red Hat:enterprise_linux:4::ws
From an advisory covering 6 CVEs
 before 0:2.3.4-14.10.el4
0:2.3.4-14.10.el4
python-devel
Red Hat:enterprise_linux:4::ws
From an advisory covering 6 CVEs
 before 0:2.3.4-14.10.el4
0:2.3.4-14.10.el4
python-docs
Red Hat:enterprise_linux:4::ws
From an advisory covering 6 CVEs
 before 0:2.3.4-14.10.el4
0:2.3.4-14.10.el4
python-tools
Red Hat:enterprise_linux:4::ws
From an advisory covering 6 CVEs
 before 0:2.3.4-14.10.el4
0:2.3.4-14.10.el4
tkinter
Red Hat:enterprise_linux:4::ws
From an advisory covering 6 CVEs
 before 0:2.3.4-14.10.el4
0:2.3.4-14.10.el4
python
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 4 CVEs
 before 0:2.4.3-44.el5
0:2.4.3-44.el5
python-debuginfo
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 4 CVEs
 before 0:2.4.3-44.el5
0:2.4.3-44.el5
python-devel
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 4 CVEs
 before 0:2.4.3-44.el5
0:2.4.3-44.el5
python
Red Hat:enterprise_linux:5::client
From an advisory covering 4 CVEs
 before 0:2.4.3-44.el5
0:2.4.3-44.el5
python-debuginfo
Red Hat:enterprise_linux:5::client
From an advisory covering 4 CVEs
 before 0:2.4.3-44.el5
0:2.4.3-44.el5
python-libs
Red Hat:enterprise_linux:5::client
From an advisory covering 4 CVEs
 before 0:2.4.3-44.el5
0:2.4.3-44.el5
python-tools
Red Hat:enterprise_linux:5::client
From an advisory covering 4 CVEs
 before 0:2.4.3-44.el5
0:2.4.3-44.el5
tkinter
Red Hat:enterprise_linux:5::client
From an advisory covering 4 CVEs
 before 0:2.4.3-44.el5
0:2.4.3-44.el5
python
Red Hat:enterprise_linux:5::server
From an advisory covering 4 CVEs
 before 0:2.4.3-44.el5
0:2.4.3-44.el5
python-debuginfo
Red Hat:enterprise_linux:5::server
From an advisory covering 4 CVEs
 before 0:2.4.3-44.el5
0:2.4.3-44.el5
python-devel
Red Hat:enterprise_linux:5::server
From an advisory covering 4 CVEs
 before 0:2.4.3-44.el5
0:2.4.3-44.el5
python-libs
Red Hat:enterprise_linux:5::server
From an advisory covering 4 CVEs
 before 0:2.4.3-44.el5
0:2.4.3-44.el5
python-tools
Red Hat:enterprise_linux:5::server
From an advisory covering 4 CVEs
 before 0:2.4.3-44.el5
0:2.4.3-44.el5
tkinter
Red Hat:enterprise_linux:5::server
From an advisory covering 4 CVEs
 before 0:2.4.3-44.el5
0:2.4.3-44.el5
python
Red Hat:enterprise_linux:6::client
From an advisory covering 3 CVEs
 before 0:2.6.6-20.el6
0:2.6.6-20.el6
python-debuginfo
Red Hat:enterprise_linux:6::client
From an advisory covering 3 CVEs
 before 0:2.6.6-20.el6
0:2.6.6-20.el6
python-devel
Red Hat:enterprise_linux:6::client
From an advisory covering 3 CVEs
 before 0:2.6.6-20.el6
0:2.6.6-20.el6
python-test
Red Hat:enterprise_linux:6::client
From an advisory covering 3 CVEs
 before 0:2.6.6-20.el6
0:2.6.6-20.el6
python-tools
Red Hat:enterprise_linux:6::client
From an advisory covering 3 CVEs
 before 0:2.6.6-20.el6
0:2.6.6-20.el6
python-libs
Red Hat:enterprise_linux:6::client
From an advisory covering 3 CVEs
 before 0:2.6.6-20.el6
0:2.6.6-20.el6
tkinter
Red Hat:enterprise_linux:6::client
From an advisory covering 3 CVEs
 before 0:2.6.6-20.el6
0:2.6.6-20.el6
python
Red Hat:enterprise_linux:6::computenode
From an advisory covering 3 CVEs
 before 0:2.6.6-20.el6
0:2.6.6-20.el6
python-debuginfo
Red Hat:enterprise_linux:6::computenode
From an advisory covering 3 CVEs
 before 0:2.6.6-20.el6
0:2.6.6-20.el6
python-devel
Red Hat:enterprise_linux:6::computenode
From an advisory covering 3 CVEs
 before 0:2.6.6-20.el6
0:2.6.6-20.el6
python-test
Red Hat:enterprise_linux:6::computenode
From an advisory covering 3 CVEs
 before 0:2.6.6-20.el6
0:2.6.6-20.el6
python-tools
Red Hat:enterprise_linux:6::computenode
From an advisory covering 3 CVEs
 before 0:2.6.6-20.el6
0:2.6.6-20.el6
tkinter
Red Hat:enterprise_linux:6::computenode
From an advisory covering 3 CVEs
 before 0:2.6.6-20.el6
0:2.6.6-20.el6
python-libs
Red Hat:enterprise_linux:6::computenode
From an advisory covering 3 CVEs
 before 0:2.6.6-20.el6
0:2.6.6-20.el6
python
Red Hat:enterprise_linux:6::server
From an advisory covering 3 CVEs
 before 0:2.6.6-20.el6
0:2.6.6-20.el6
python-debuginfo
Red Hat:enterprise_linux:6::server
From an advisory covering 3 CVEs
 before 0:2.6.6-20.el6
0:2.6.6-20.el6
python-test
Red Hat:enterprise_linux:6::server
From an advisory covering 3 CVEs
 before 0:2.6.6-20.el6
0:2.6.6-20.el6
python-tools
Red Hat:enterprise_linux:6::server
From an advisory covering 3 CVEs
 before 0:2.6.6-20.el6
0:2.6.6-20.el6
tkinter
Red Hat:enterprise_linux:6::server
From an advisory covering 3 CVEs
 before 0:2.6.6-20.el6
0:2.6.6-20.el6
python-devel
Red Hat:enterprise_linux:6::server
From an advisory covering 3 CVEs
 before 0:2.6.6-20.el6
0:2.6.6-20.el6
python-docs
Red Hat:enterprise_linux:6::server
From an advisory covering 3 CVEs
 before 0:2.6.6-2.el6
0:2.6.6-2.el6
python-libs
Red Hat:enterprise_linux:6::server
From an advisory covering 3 CVEs
 before 0:2.6.6-20.el6
0:2.6.6-20.el6
python
Red Hat:enterprise_linux:6::workstation
From an advisory covering 3 CVEs
 before 0:2.6.6-20.el6
0:2.6.6-20.el6
python-debuginfo
Red Hat:enterprise_linux:6::workstation
From an advisory covering 3 CVEs
 before 0:2.6.6-20.el6
0:2.6.6-20.el6
python-test
Red Hat:enterprise_linux:6::workstation
From an advisory covering 3 CVEs
 before 0:2.6.6-20.el6
0:2.6.6-20.el6
python-tools
Red Hat:enterprise_linux:6::workstation
From an advisory covering 3 CVEs
 before 0:2.6.6-20.el6
0:2.6.6-20.el6
python-devel
Red Hat:enterprise_linux:6::workstation
From an advisory covering 3 CVEs
 before 0:2.6.6-20.el6
0:2.6.6-20.el6
python-docs
Red Hat:enterprise_linux:6::workstation
From an advisory covering 3 CVEs
 before 0:2.6.6-2.el6
0:2.6.6-2.el6
python-libs
Red Hat:enterprise_linux:6::workstation
From an advisory covering 3 CVEs
 before 0:2.6.6-20.el6
0:2.6.6-20.el6
tkinter
Red Hat:enterprise_linux:6::workstation
From an advisory covering 3 CVEs
 before 0:2.6.6-20.el6
0:2.6.6-20.el6
python
SUSE:Linux Enterprise Module for Basesystem 15
From an advisory covering 37 CVEs
 before 2.7.17-7.32.2
2.7.17-7.32.2
python-base
SUSE:Linux Enterprise Module for Basesystem 15
From an advisory covering 37 CVEs
 before 2.7.17-7.32.1
2.7.17-7.32.1
python
SUSE:Linux Enterprise Module for Basesystem 15 SP1
From an advisory covering 37 CVEs
 before 2.7.17-7.32.2
2.7.17-7.32.2
python-base
SUSE:Linux Enterprise Module for Basesystem 15 SP1
From an advisory covering 37 CVEs
 before 2.7.17-7.32.1
2.7.17-7.32.1
python
SUSE:Linux Enterprise Module for Desktop Applications 15
From an advisory covering 37 CVEs
 before 2.7.17-7.32.2
2.7.17-7.32.2
python
SUSE:Linux Enterprise Module for Desktop Applications 15 SP1
From an advisory covering 37 CVEs
 before 2.7.17-7.32.2
2.7.17-7.32.2
python
SUSE:Linux Enterprise Module for Python 2 15 SP1
From an advisory covering 37 CVEs
 before 2.7.17-7.32.2
2.7.17-7.32.2
python-base
SUSE:Linux Enterprise Module for Python 2 15 SP1
From an advisory covering 37 CVEs
 before 2.7.17-7.32.1
2.7.17-7.32.1
python-base
openSUSE:Tumbleweed
From an advisory covering 14 CVEs
 before 2.7.12-1.4
2.7.12-1.4
python
openSUSE:Tumbleweed
From an advisory covering 40 CVEs
 before 2.7.18-8.1
2.7.18-8.1

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2011-1521 is a medium vulnerability (CVSS 6.4) in Python, published May 24, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.56%, the 89th percentile. Fixed in python2.7 2.7.1-7.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 6 references. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open