CVE-2017-1000158
CPython (aka Python) up to 2.7.13 is vulnerable to an integer overflow in the...
CPython (aka Python) up to 2.7.13 is vulnerable to an integer overflow in the PyString_DecodeEscape function in stringobject.c, resulting in heap-based buffer overflow (and possible arbitrary code execution)
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
9.8
CPython (aka Python) up to 2.7.13 is vulnerable to an integer overflow in the PyString_DecodeEscape function in stringobject.c, resulting in heap-based buffer overflow (and possible arbitrary code execution)
- Record
CVE-2017-1000158- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-190
- Updated
- 2026-11-02
CVE List No score
CPython (aka Python) up to 2.7.13 is vulnerable to an integer overflow in the PyString_DecodeEscape function in stringobject.c, resulting in heap-based buffer overflow (and possible arbitrary code execution)
- Record
CVE-2017-1000158- Updated
- 2026-11-02
EUVDEUVD-2017-1443 No score
CPython (aka Python) up to 2.7.13 is vulnerable to an integer overflow in the PyString_DecodeEscape function in stringobject.c, resulting in heap-based buffer overflow (and possible arbitrary code execution)
- Record
EUVD-2017-1443- Updated
- 2026-11-02
GitHub AdvisoriesGHSA-r68f-4xcm-3xr6
9.8
CPython (aka Python) up to 2.7.13 is vulnerable to an integer overflow in the...
CPython (aka Python) up to 2.7.13 is vulnerable to an integer overflow in the PyString_DecodeEscape function in stringobject.c, resulting in heap-based buffer overflow (and possible arbitrary code execution)
- Record
GHSA-r68f-4xcm-3xr6- CVSS 3.0
- 9.8 Critical
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-190
- Updated
- 2026-11-02
OSVALPINE-CVE-2017-1000158
9.8
CPython (aka Python) up to 2.7.13 is vulnerable to an integer overflow in the PyString_DecodeEscape function in stringobject.c, resulting in heap-based buffer overflow (and possible arbitrary code execution)
- Record
ALPINE-CVE-2017-1000158- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVAZL-109614
9.8
CVE-2017-1000158 affecting package python-py 1.11.0-1
CPython (aka Python) up to 2.7.13 is vulnerable to an integer overflow in the PyString_DecodeEscape function in stringobject.c, resulting in heap-based buffer overflow (and possible arbitrary code execution)
- Record
AZL-109614- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 14 moreShow less
OSV
9.8
CPython (aka Python) up to 2.7.13 is vulnerable to an integer overflow in the PyString_DecodeEscape function in stringobject.c, resulting in heap-based buffer overflow (and possible arbitrary code execution)
- Record
CVE-2017-1000158- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2017-1000158
9.8
CPython (aka Python) up to 2.7.13 is vulnerable to an integer overflow in the PyString_DecodeEscape function in stringobject.c, resulting in heap-based buffer overflow (and possible arbitrary code execution)
- Record
DEBIAN-CVE-2017-1000158- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2017-1000158
9.8
CPython (aka Python) up to 2.7.13 is vulnerable to an integer overflow in the PyString_DecodeEscape function in stringobject.c, resulting in heap-based buffer overflow (and possible arbitrary code execution)
- Record
UBUNTU-CVE-2017-1000158- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 3.0
- 9.8 Critical
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVCLSA-2026-1777585788 No score
python: Fix of CVE-2017-1000158
- CVE-2017-1000158: fix integer overflow in PyString_DecodeEscape that could trigger a heap-based buffer overflow when decoding very large byte strings
- Record
CLSA-2026-1777585788- Updated
- 2026-11-02
OSVCLSA-2026-1777586657 No score
python: Fix of CVE-2017-1000158
- CVE-2017-1000158: fix integer overflow in PyString_DecodeEscape that could trigger a heap-based buffer overflow when decoding very large byte strings
- Record
CLSA-2026-1777586657- Updated
- 2026-11-02
OSVMGASA-2018-0004 No score
Updated python/python3 packages fix security vulnerability
It was discovered that Python incorrectly handled decoding certain strings. An attacker could possibly use this issue to execute arbitrary code (CVE-2017-1000158).
- Record
MGASA-2018-0004- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:11202-1 No score
python-2.7.18-8.1 on GA media
These are all security issues fixed in the python-2.7.18-8.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11202-1- Updated
- 2026-11-02
OSVPSF-2017-6 No score
PyString_DecodeEscape integer overflow
CPython (aka Python) up to 2.7.13 is vulnerable to an integer overflow in the PyString_DecodeEscape function in stringobject.c, resulting in heap-based buffer overflow (and possible arbitrary code execution)
- Record
PSF-2017-6- Updated
- 2026-11-02
OSVSUSE-SU-2018:0768-1 No score
Security update for python
This update for python fixes the following issues:
- CVE-2017-1000158: Fixed integer overflow in thePyString_DecodeEscape function (bsc#1068664).
- Record
SUSE-SU-2018:0768-1- Updated
- 2026-11-02
OSVSUSE-SU-2018:1372-1 No score
Security update for python
This update for python fixes the following issues:
Security issues fixed:
- CVE-2017-1000158: Fixed integer overflows in PyString_DecodeEscape that could have resulted in heap-based buffer overflow attacks and possible arbitrary code execution (bsc#1068664).
- CVE-2018-1000030: Fixed crash inside the Python interpreter when multiple threads used the same I/O stream concurrently (bsc#1079300).
- Record
SUSE-SU-2018:1372-1- Updated
- 2026-11-02
OSVSUSE-SU-2020:0234-1 No score
Security update for python
This update for python fixes the following issues:
Updated to version 2.7.17 to unify packages among openSUSE:Factory and SLE versions (bsc#1159035).
- Record
SUSE-SU-2020:0234-1- Updated
- 2026-11-02
OSVSUSE-SU-2020:0497-1 No score
Security update for python3
This update for python3 fixes the following issues:
Update to 3.4.10 (jsc#SLE-9427, bsc#1159208) from 3.4.6:
Security issues fixed:
- Update expat copy from 2.1.1 to 2.2.0 to fix the following issues: CVE-2012-0876, CVE-2016-0718, CVE-2016-4472, CVE-2017-9233, CVE-2016-9063
- CVE-2017-1000158: Fix an integer overflow in thePyString_DecodeEscape function in stringobject.c, resulting in heap-based bufferoverflow (bsc#1068664).
- Record
SUSE-SU-2020:0497-1- Updated
- 2026-11-02
OSVUSN-3496-1 No score
python2.7 vulnerability
It was discovered that Python incorrectly handled decoding certain strings. An attacker could possibly use this issue to execute arbitrary code.
- Record
USN-3496-1- Updated
- 2026-11-02
OSVUSN-3496-3 No score
python3.4, python3.5 vulnerability
USN-3496-1 fixed a vulnerability in Python2.7. This update provides the corresponding update for versions 3.4 and 3.5.
Original advisory details:
It was discovered that Python incorrectly handled decoding certain strings. An attacker could possibly use this issue to execute arbitrary code.
- Record
USN-3496-3- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
pythonAlpine:v3.4 |
3.4.0 up to 2.7.14-r0 | 2.7.14-r0 |
python2Alpine:v3.5 |
before 2.7.14-r0 | 2.7.14-r0 |
python2Alpine:v3.6 |
before 2.7.14-r0 | 2.7.14-r0 |
python-pyAzure Linux:3 |
through 1.11.0-1 | None known |
pythonTuxCare:OracleLinux:6 |
before 2.6.6-70.el6.tuxcare.els21 | 2.6.6-70.el6.tuxcare.els21 |
python-develTuxCare:OracleLinux:6 |
before 2.6.6-70.el6.tuxcare.els21 | 2.6.6-70.el6.tuxcare.els21 |
python-libsTuxCare:OracleLinux:6 |
before 2.6.6-70.el6.tuxcare.els21 | 2.6.6-70.el6.tuxcare.els21 |
python-testTuxCare:OracleLinux:6 |
before 2.6.6-70.el6.tuxcare.els21 | 2.6.6-70.el6.tuxcare.els21 |
python-toolsTuxCare:OracleLinux:6 |
before 2.6.6-70.el6.tuxcare.els21 | 2.6.6-70.el6.tuxcare.els21 |
tkinterTuxCare:OracleLinux:6 |
before 2.6.6-70.el6.tuxcare.els21 | 2.6.6-70.el6.tuxcare.els21 |
Show 92 moreShow less
| Package | Affected | Fixed |
|---|---|---|
pythonTuxCare:CentOS:6 |
before 2.6.6-70.el6.tuxcare.els21 | 2.6.6-70.el6.tuxcare.els21 |
python-develTuxCare:CentOS:6 |
before 2.6.6-70.el6.tuxcare.els21 | 2.6.6-70.el6.tuxcare.els21 |
python-libsTuxCare:CentOS:6 |
before 2.6.6-70.el6.tuxcare.els21 | 2.6.6-70.el6.tuxcare.els21 |
python-testTuxCare:CentOS:6 |
before 2.6.6-70.el6.tuxcare.els21 | 2.6.6-70.el6.tuxcare.els21 |
python-toolsTuxCare:CentOS:6 |
before 2.6.6-70.el6.tuxcare.els21 | 2.6.6-70.el6.tuxcare.els21 |
tkinterTuxCare:CentOS:6 |
before 2.6.6-70.el6.tuxcare.els21 | 2.6.6-70.el6.tuxcare.els21 |
python2.7Debian:11 |
before 2.7.13-4 | 2.7.13-4 |
python2.7Debian:7 |
before 2.7.3-6+deb7u4, plus listed versions 2.7.3-62.7.3-6+deb7u12.7.3-6+deb7u22.7.3-6+deb7u3 |
2.7.3-6+deb7u4 |
python2.6Debian:7 |
before 2.6.8-1.1+deb7u1, plus listed versions 2.6.8-1.1 |
2.6.8-1.1+deb7u1 |
python2.7Debian:8 |
before 2.7.9-2+deb8u2, plus listed versions 2.7.9-22.7.9-2+deb8u1 |
2.7.9-2+deb8u2 |
python3.4Debian:8 |
before 3.4.2-1+deb8u1, plus listed versions 3.4.2-1 |
3.4.2-1+deb8u1 |
python3.5Debian:9 |
before 3.5.3-1+deb9u1, plus listed versions 3.5.3-1 |
3.5.3-1+deb9u1 |
pythonMageia:5 |
before 2.7.9-2.5.mga5 | 2.7.9-2.5.mga5 |
python3Mageia:5 |
before 3.4.3-1.6.mga5 | 3.4.3-1.6.mga5 |
pythonMageia:6 |
before 2.7.13-1.1.mga6 | 2.7.13-1.1.mga6 |
python3Mageia:6 |
before 3.5.3-1.1.mga6 | 3.5.3-1.1.mga6 |
pythonSUSE:Linux Enterprise Software Development Kit 11 SP4 |
before 2.6.9-40.3.1 | 2.6.9-40.3.1 |
python-baseSUSE:Linux Enterprise Software Development Kit 11 SP4 |
before 2.6.9-40.3.1 | 2.6.9-40.3.1 |
python-docSUSE:Linux Enterprise Software Development Kit 11 SP4 |
before 2.6-8.40.3.1 | 2.6-8.40.3.1 |
pythonSUSE:Linux Enterprise Server 11 SP4 |
before 2.6.9-40.3.1 | 2.6.9-40.3.1 |
python-baseSUSE:Linux Enterprise Server 11 SP4 |
before 2.6.9-40.3.1 | 2.6.9-40.3.1 |
python-docSUSE:Linux Enterprise Server 11 SP4 |
before 2.6-8.40.3.1 | 2.6-8.40.3.1 |
pythonSUSE:Linux Enterprise Server for SAP Applications 11 SP4 |
before 2.6.9-40.3.1 | 2.6.9-40.3.1 |
python-baseSUSE:Linux Enterprise Server for SAP Applications 11 SP4 |
before 2.6.9-40.3.1 | 2.6.9-40.3.1 |
python-docSUSE:Linux Enterprise Server for SAP Applications 11 SP4 |
before 2.6-8.40.3.1 | 2.6-8.40.3.1 |
pythonSUSE:Linux Enterprise Desktop 12 SP3 |
before 2.7.13-28.3.2 | 2.7.13-28.3.2 |
python-baseSUSE:Linux Enterprise Desktop 12 SP3 |
before 2.7.13-28.3.2 | 2.7.13-28.3.2 |
python-baseSUSE:Linux Enterprise Software Development Kit 12 SP3 |
before 2.7.13-28.3.2 | 2.7.13-28.3.2 |
pythonSUSE:Linux Enterprise Server 12 SP3 |
before 2.7.13-28.3.2 | 2.7.13-28.3.2 |
python-baseSUSE:Linux Enterprise Server 12 SP3 |
before 2.7.13-28.3.2 | 2.7.13-28.3.2 |
python-docSUSE:Linux Enterprise Server 12 SP3 |
before 2.7.13-28.3.3 | 2.7.13-28.3.3 |
pythonSUSE:Linux Enterprise Server for SAP Applications 12 SP3 |
before 2.7.13-28.3.2 | 2.7.13-28.3.2 |
python-baseSUSE:Linux Enterprise Server for SAP Applications 12 SP3 |
before 2.7.13-28.3.2 | 2.7.13-28.3.2 |
python-docSUSE:Linux Enterprise Server for SAP Applications 12 SP3 |
before 2.7.13-28.3.3 | 2.7.13-28.3.3 |
python-baseSUSE:Linux Enterprise Workstation Extension 12 SP3 |
before 2.7.13-28.3.2 | 2.7.13-28.3.2 |
pythonSUSE:Enterprise Storage 5 |
before 2.7.13-28.3.2 | 2.7.13-28.3.2 |
pythonSUSE:Linux Enterprise Module for Basesystem 15 |
before 2.7.17-7.32.2 | 2.7.17-7.32.2 |
python-baseSUSE:Linux Enterprise Module for Basesystem 15 |
before 2.7.17-7.32.1 | 2.7.17-7.32.1 |
pythonSUSE:Linux Enterprise Module for Basesystem 15 SP1 |
before 2.7.17-7.32.2 | 2.7.17-7.32.2 |
python-baseSUSE:Linux Enterprise Module for Basesystem 15 SP1 |
before 2.7.17-7.32.1 | 2.7.17-7.32.1 |
pythonSUSE:Linux Enterprise Module for Desktop Applications 15 |
before 2.7.17-7.32.2 | 2.7.17-7.32.2 |
pythonSUSE:Linux Enterprise Module for Desktop Applications 15 SP1 |
before 2.7.17-7.32.2 | 2.7.17-7.32.2 |
pythonSUSE:Linux Enterprise Module for Python 2 15 SP1 |
before 2.7.17-7.32.2 | 2.7.17-7.32.2 |
python-baseSUSE:Linux Enterprise Module for Python 2 15 SP1 |
before 2.7.17-7.32.1 | 2.7.17-7.32.1 |
python3SUSE:HPE Helion OpenStack 8 |
before 3.4.10-25.39.3 | 3.4.10-25.39.3 |
python3-baseSUSE:HPE Helion OpenStack 8 |
before 3.4.10-25.39.2 | 3.4.10-25.39.2 |
python3SUSE:OpenStack Cloud 7 |
before 3.4.10-25.39.3 | 3.4.10-25.39.3 |
python3-baseSUSE:OpenStack Cloud 7 |
before 3.4.10-25.39.2 | 3.4.10-25.39.2 |
python3SUSE:OpenStack Cloud 8 |
before 3.4.10-25.39.3 | 3.4.10-25.39.3 |
python3-baseSUSE:OpenStack Cloud 8 |
before 3.4.10-25.39.2 | 3.4.10-25.39.2 |
python3SUSE:OpenStack Cloud Crowbar 8 |
before 3.4.10-25.39.3 | 3.4.10-25.39.3 |
python3-baseSUSE:OpenStack Cloud Crowbar 8 |
before 3.4.10-25.39.2 | 3.4.10-25.39.2 |
python3SUSE:Linux Enterprise Desktop 12 SP4 |
before 3.4.10-25.39.3 | 3.4.10-25.39.3 |
python3-baseSUSE:Linux Enterprise Desktop 12 SP4 |
before 3.4.10-25.39.2 | 3.4.10-25.39.2 |
python3SUSE:Linux Enterprise Module for Web and Scripting 12 |
before 3.4.10-25.39.3 | 3.4.10-25.39.3 |
python3-baseSUSE:Linux Enterprise Module for Web and Scripting 12 |
before 3.4.10-25.39.2 | 3.4.10-25.39.2 |
python3SUSE:Linux Enterprise Server for SAP Applications 12 SP1 |
before 3.4.10-25.39.3 | 3.4.10-25.39.3 |
python3-baseSUSE:Linux Enterprise Server for SAP Applications 12 SP1 |
before 3.4.10-25.39.2 | 3.4.10-25.39.2 |
python3SUSE:Linux Enterprise Server for SAP Applications 12 SP2 |
before 3.4.10-25.39.3 | 3.4.10-25.39.3 |
python3-baseSUSE:Linux Enterprise Server for SAP Applications 12 SP2 |
before 3.4.10-25.39.2 | 3.4.10-25.39.2 |
python3SUSE:Linux Enterprise Server for SAP Applications 12 SP3 |
before 3.4.10-25.39.3 | 3.4.10-25.39.3 |
python3-baseSUSE:Linux Enterprise Server for SAP Applications 12 SP3 |
before 3.4.10-25.39.2 | 3.4.10-25.39.2 |
python3SUSE:Linux Enterprise Software Development Kit 12 SP4 |
before 3.4.10-25.39.3 | 3.4.10-25.39.3 |
python3-baseSUSE:Linux Enterprise Software Development Kit 12 SP4 |
before 3.4.10-25.39.2 | 3.4.10-25.39.2 |
python3SUSE:Linux Enterprise Software Development Kit 12 SP5 |
before 3.4.10-25.39.3 | 3.4.10-25.39.3 |
python3-baseSUSE:Linux Enterprise Software Development Kit 12 SP5 |
before 3.4.10-25.39.2 | 3.4.10-25.39.2 |
python3SUSE:Linux Enterprise Server 12 SP1-LTSS |
before 3.4.10-25.39.3 | 3.4.10-25.39.3 |
python3-baseSUSE:Linux Enterprise Server 12 SP1-LTSS |
before 3.4.10-25.39.2 | 3.4.10-25.39.2 |
python3SUSE:Linux Enterprise Server 12 SP2-LTSS |
before 3.4.10-25.39.3 | 3.4.10-25.39.3 |
python3-baseSUSE:Linux Enterprise Server 12 SP2-LTSS |
before 3.4.10-25.39.2 | 3.4.10-25.39.2 |
python3SUSE:Linux Enterprise Server 12 SP2-BCL |
before 3.4.10-25.39.3 | 3.4.10-25.39.3 |
python3-baseSUSE:Linux Enterprise Server 12 SP2-BCL |
before 3.4.10-25.39.2 | 3.4.10-25.39.2 |
python3SUSE:Linux Enterprise Server 12 SP3-LTSS |
before 3.4.10-25.39.3 | 3.4.10-25.39.3 |
python3-baseSUSE:Linux Enterprise Server 12 SP3-LTSS |
before 3.4.10-25.39.2 | 3.4.10-25.39.2 |
python3SUSE:Linux Enterprise Server 12 SP3-BCL |
before 3.4.10-25.39.3 | 3.4.10-25.39.3 |
python3-baseSUSE:Linux Enterprise Server 12 SP3-BCL |
before 3.4.10-25.39.2 | 3.4.10-25.39.2 |
python3SUSE:Linux Enterprise Server 12 SP4 |
before 3.4.10-25.39.3 | 3.4.10-25.39.3 |
python3-baseSUSE:Linux Enterprise Server 12 SP4 |
before 3.4.10-25.39.2 | 3.4.10-25.39.2 |
python3SUSE:Linux Enterprise Server for SAP Applications 12 SP4 |
before 3.4.10-25.39.3 | 3.4.10-25.39.3 |
python3-baseSUSE:Linux Enterprise Server for SAP Applications 12 SP4 |
before 3.4.10-25.39.2 | 3.4.10-25.39.2 |
python3SUSE:Linux Enterprise Server 12 SP5 |
before 3.4.10-25.39.3 | 3.4.10-25.39.3 |
python3-baseSUSE:Linux Enterprise Server 12 SP5 |
before 3.4.10-25.39.2 | 3.4.10-25.39.2 |
python3SUSE:Linux Enterprise Server for SAP Applications 12 SP5 |
before 3.4.10-25.39.3 | 3.4.10-25.39.3 |
python3-baseSUSE:Linux Enterprise Server for SAP Applications 12 SP5 |
before 3.4.10-25.39.2 | 3.4.10-25.39.2 |
python3SUSE:Enterprise Storage 5 |
before 3.4.10-25.39.3 | 3.4.10-25.39.3 |
python3-baseSUSE:Enterprise Storage 5 |
before 3.4.10-25.39.2 | 3.4.10-25.39.2 |
python2.7Ubuntu:14.04:LTS |
before 2.7.6-8ubuntu0.4, plus listed versions 2.7.5-8ubuntu32.7.5-8ubuntu42.7.6-22.7.6-2ubuntu12.7.6-3 Show 8 moreShow less2.7.6-3ubuntu12.7.6-42.7.6-4ubuntu12.7.6-52.7.6-72.7.6-82.7.6-8ubuntu0.22.7.6-8ubuntu0.3 |
2.7.6-8ubuntu0.4 |
python3.4Ubuntu:14.04:LTS |
before 3.4.3-1ubuntu1~14.04.6, plus listed versions 3.4~b1-0ubuntu33.4~b1-4ubuntu43.4~b1-4ubuntu63.4~b1-5ubuntu23.4~b2-1 Show 11 moreShow less3.4~b3-1ubuntu13.4~rc1-1build13.4~rc2-13.4~rc3-0ubuntu13.4.0-13.4.0-2ubuntu13.4.0-2ubuntu1.13.4.3-1ubuntu1~14.04.13.4.3-1ubuntu1~14.04.33.4.3-1ubuntu1~14.04.43.4.3-1ubuntu1~14.04.5 |
3.4.3-1ubuntu1~14.04.6 |
python3.5Ubuntu:14.04:LTS |
before 3.5.2-2ubuntu0~16.04.4~14.04.1 | 3.5.2-2ubuntu0~16.04.4~14.04.1 |
python2.7Ubuntu:16.04:LTS |
before 2.7.12-1ubuntu0~16.04.2, plus listed versions 2.7.10-4ubuntu12.7.10-4ubuntu22.7.11-22.7.11-32.7.11-4 Show 5 moreShow less2.7.11-62.7.11-72.7.11-7ubuntu12.7.12-1~16.042.7.12-1ubuntu0~16.04.1 |
2.7.12-1ubuntu0~16.04.2 |
python3.5Ubuntu:16.04:LTS |
before 3.5.2-2ubuntu0~16.04.4, plus listed versions 3.5.0-33.5.0-3ubuntu13.5.1~rc1-2ubuntu13.5.1-13.5.1-2 Show 11 moreShow less3.5.1-33.5.1-53.5.1-6ubuntu13.5.1-6ubuntu23.5.1-9ubuntu13.5.1-103.5.2-2~16.013.5.2-2~16.043.5.2-2ubuntu0~16.04.13.5.2-2ubuntu0~16.04.23.5.2-2ubuntu0~16.04.3 |
3.5.2-2ubuntu0~16.04.4 |
pythonopenSUSE:Tumbleweed |
before 2.7.18-8.1 | 2.7.18-8.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2017-1000158 is a critical vulnerability (CVSS 9.8) in Python, published November 17, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 7.94%, the 94th percentile. Fixed in python 2.7.14-r0.
References
lists.debian.org/debian-lts-announce/2017/11/msg00035.html
lists.debian.org/debian-lts-announce/2018/09/msg00031.html
bugs.python.org/issue30657
securitytracker.com/id/1039890
lists.debian.org/debian-lts-announce/2017/11/msg00036.html
debian.org/security/2018/dsa-4307
Show 161 moreShow less
lists.debian.org/debian-lts-announce/2018/09/msg00030.html
security.gentoo.org/glsa/201805-02
security.netapp.com/advisory/ntap-20230216-0001
nvd.nist.gov/vuln/detail/CVE-2017-1000158
github.com/advisories/GHSA-r68f-4xcm-3xr6
security.alpinelinux.org/vuln/CVE-2017-1000158
errata.tuxcare.com/els_os/oraclelinux6els/CLSA-2026-1777585788.html
errata.tuxcare.com/els_os/centos6els/CLSA-2026-1777586657.html
security-tracker.debian.org/tracker/CVE-2017-1000158
advisories.mageia.org/MGASA-2018-0004.html
bugs.mageia.org/show_bug.cgi?id=22103
usn.ubuntu.com/usn/usn-3496-1
usn.ubuntu.com/usn/usn-3496-3
suse.com/support/update/announcement/2018/suse-su-20180768-1
bugzilla.suse.com/1068664
suse.com/security/cve/CVE-2017-1000158
suse.com/support/update/announcement/2018/suse-su-20181372-1
bugzilla.suse.com/1079300
suse.com/security/cve/CVE-2018-1000030
suse.com/support/update/announcement/2020/suse-su-20200234-1
bugzilla.suse.com/1027282
bugzilla.suse.com/1041090
bugzilla.suse.com/1042670
bugzilla.suse.com/1073269
bugzilla.suse.com/1073748
bugzilla.suse.com/1078326
bugzilla.suse.com/1078485
bugzilla.suse.com/1081750
bugzilla.suse.com/1083507
bugzilla.suse.com/1084650
bugzilla.suse.com/1086001
bugzilla.suse.com/1088004
bugzilla.suse.com/1088009
bugzilla.suse.com/1109847
bugzilla.suse.com/1111793
bugzilla.suse.com/1113755
bugzilla.suse.com/1122191
bugzilla.suse.com/1129346
bugzilla.suse.com/1130840
bugzilla.suse.com/1130847
bugzilla.suse.com/1138459
bugzilla.suse.com/1141853
bugzilla.suse.com/1149792
bugzilla.suse.com/1149955
bugzilla.suse.com/1153238
bugzilla.suse.com/1153830
bugzilla.suse.com/1159035
bugzilla.suse.com/214983
bugzilla.suse.com/298378
bugzilla.suse.com/346490
bugzilla.suse.com/367853
bugzilla.suse.com/379534
bugzilla.suse.com/380942
bugzilla.suse.com/399190
bugzilla.suse.com/406051
bugzilla.suse.com/425138
bugzilla.suse.com/426563
bugzilla.suse.com/430761
bugzilla.suse.com/432677
bugzilla.suse.com/436966
bugzilla.suse.com/437293
bugzilla.suse.com/441088
bugzilla.suse.com/462375
bugzilla.suse.com/525295
bugzilla.suse.com/534721
bugzilla.suse.com/551715
bugzilla.suse.com/572673
bugzilla.suse.com/577032
bugzilla.suse.com/581765
bugzilla.suse.com/603255
bugzilla.suse.com/617751
bugzilla.suse.com/637176
bugzilla.suse.com/638233
bugzilla.suse.com/658604
bugzilla.suse.com/673071
bugzilla.suse.com/682554
bugzilla.suse.com/697251
bugzilla.suse.com/707667
bugzilla.suse.com/718009
bugzilla.suse.com/747125
bugzilla.suse.com/747794
bugzilla.suse.com/751718
bugzilla.suse.com/754447
bugzilla.suse.com/766778
bugzilla.suse.com/794139
bugzilla.suse.com/804978
bugzilla.suse.com/827982
bugzilla.suse.com/831442
bugzilla.suse.com/834601
bugzilla.suse.com/836739
bugzilla.suse.com/856835
bugzilla.suse.com/856836
bugzilla.suse.com/857470
bugzilla.suse.com/863741
bugzilla.suse.com/885882
bugzilla.suse.com/898572
bugzilla.suse.com/901715
bugzilla.suse.com/935856
bugzilla.suse.com/945401
bugzilla.suse.com/964182
bugzilla.suse.com/984751
bugzilla.suse.com/985177
bugzilla.suse.com/985348
bugzilla.suse.com/989523
bugzilla.suse.com/997436
suse.com/security/cve/CVE-2007-2052
suse.com/security/cve/CVE-2008-1721
suse.com/security/cve/CVE-2008-2315
suse.com/security/cve/CVE-2008-2316
suse.com/security/cve/CVE-2008-3142
suse.com/security/cve/CVE-2008-3143
suse.com/security/cve/CVE-2008-3144
suse.com/security/cve/CVE-2011-1521
suse.com/security/cve/CVE-2011-3389
suse.com/security/cve/CVE-2011-4944
suse.com/security/cve/CVE-2012-0845
suse.com/security/cve/CVE-2012-1150
suse.com/security/cve/CVE-2013-1752
suse.com/security/cve/CVE-2013-1753
suse.com/security/cve/CVE-2013-4238
suse.com/security/cve/CVE-2014-1912
suse.com/security/cve/CVE-2014-4650
suse.com/security/cve/CVE-2014-7185
suse.com/security/cve/CVE-2016-0772
suse.com/security/cve/CVE-2016-1000110
suse.com/security/cve/CVE-2016-5636
suse.com/security/cve/CVE-2016-5699
suse.com/security/cve/CVE-2017-18207
suse.com/security/cve/CVE-2018-1000802
suse.com/security/cve/CVE-2018-1060
suse.com/security/cve/CVE-2018-1061
suse.com/security/cve/CVE-2018-14647
suse.com/security/cve/CVE-2018-20852
suse.com/security/cve/CVE-2019-10160
suse.com/security/cve/CVE-2019-16056
suse.com/security/cve/CVE-2019-16935
suse.com/security/cve/CVE-2019-5010
suse.com/security/cve/CVE-2019-9636
suse.com/security/cve/CVE-2019-9947
suse.com/security/cve/CVE-2019-9948
suse.com/support/update/announcement/2020/suse-su-20200497-1
bugzilla.suse.com/1159208
bugzilla.suse.com/1159623
suse.com/security/cve/CVE-2012-0876
suse.com/security/cve/CVE-2016-0718
suse.com/security/cve/CVE-2016-4472
suse.com/security/cve/CVE-2016-9063
suse.com/security/cve/CVE-2017-9233
ubuntu.com/security/CVE-2017-1000158
github.com/python/cpython/commit/c3c9db89273fabc62ea1b48389d9a3000c1c03ae
ubuntu.com/security/notices/USN-3496-1
ubuntu.com/security/notices/USN-3496-2
ubuntu.com/security/notices/USN-3496-3
cve.org/CVERecord?id=CVE-2017-1000158
suse.com/security/cve/CVE-2019-18348
suse.com/security/cve/CVE-2019-9674
suse.com/security/cve/CVE-2020-8492
suse.com/security/cve/CVE-2021-23336
suse.com/security/cve/CVE-2021-3177
suse.com/security/cve/CVE-2021-3733
suse.com/security/cve/CVE-2021-3737