python-py vulnerabilities (Azure Linux)
67 vulnerabilities.
-
python-pyAzure Linux socket.getaddrinfo() accepts embedded null bytes in host and port 5.3 Medium -
python-pyAzure Linux Lenient parsing of integers for response body and chunk framing 2.0 Low -
python-pyAzure Linux Distrust compromised intermediate certificates in ssl module 9.4 Critical -
python-pyAzure Linux tar filter allows writing outside destination via empty-named symlink 6.9 Medium -
python-pyAzure Linux tarfile extraction filter bypass allows creation of directories outside the destination 6.3 Medium -
python-pyAzure Linux Incremental HTMLParser feed() allows CPU-exhaustion DoS via repeated unterminated markup declarations 8.7 High -
python-pyAzure Linux Tarfile.extract() doesn't fully respect filter parameter 2.0 Low -
python-pyAzure Linux Configuration Injection via Carriage Return (\r) in write() method 4.1 Medium -
python-pyAzure Linux The expat and elementtree parsers use insufficient entropy for XML hash-flooding protection 6.3 Medium -
python-pyAzure Linux BaseCookie.js_output() does not neutralize embedded characters 2.1 Low -
python-pyAzure Linux webbrowser.open() allows leading dashes in URLs 7.0 High -
python-pyAzure Linux Stack overflow parsing XML with deeply nested DTD content models 6.0 Medium -
python-pyAzure Linux Incomplete control character validation in http.cookies 6.0 Medium -
python-pyAzure Linux tarfile: Skip DIRTYPE normalization during GNU LONGNAME/LONGLINK handling 2.0 Low -
python-pyAzure Linux base64.b64decode() always accepts "+/" characters, despite setting altchars 6.3 Medium -
python-pyAzure Linux Quadratic complexity in node ID cache clearing 6.3 Medium -
python-pyAzure Linux Out-of-memory when loading Plist 2.1 Low -
python-pyAzure Linux Excessive read buffering DoS in http.client 6.3 Medium -
python-pyAzure Linux Quadratic complexity in os.path.expandvars() with user-controlled template 1.8 Low -
python-pyAzure Linux ZIP64 End of Central Directory (EOCD) Locator record offset not checked 4.3 Medium -
python-pyAzure Linux Virtual environment (venv) activation scripts don't quote paths 5.3 Medium -
python-pyAzure Linux Regular-expression DoS when parsing TarFile headers 7.5 High -
python-pyAzure Linux Quadratic complexity parsing cookies with backslashes 7.5 High -
python-pyAzure Linux An issue was discovered in Python before 3.8.18, 3.9.x before 3.9.18, 3.10.x before 3.10.13, and... 5.3 Medium -
python-pyAzure Linux An issue was discovered in compare_digest in Lib/hmac.py in Python through 3.9.1. Constant-time... 5.9 Medium -
python-pyAzure Linux An XML External Entity (XXE) issue was discovered in Python through 3.9.1. The plistlib module no... 9.8 Critical -
python-pyAzure Linux read_ints in plistlib.py in Python through 3.9.1 is vulnerable to a potential DoS attack via CPU... 6.5 Medium -
python-pyAzure Linux A use-after-free exists in Python through 3.9 via heappushpop in heapq. 7.5 High -
python-pyAzure Linux The legacy email.utils.parseaddr function in Python through 3.11.4 allows attackers to trigger ... 7.5 High -
python-pyAzure Linux The e-mail module of Python 0 - 2.7.18, 3.x - 3.11 incorrectly parses e-mail addresses which... 5.3 Medium -
python-pyAzure Linux An issue in the urllib.parse component of Python before v3.11 allows attackers to bypass... 7.5 High -
python-pyAzure Linux An issue was discovered in Python before 3.11.1. An unnecessary quadratic algorithm exists in one... 7.5 High -
python-pyAzure Linux A flaw was found in Python, specifically within the urllib.parse module. This module helps break... 7.5 High -
python-pyAzure Linux Execution with Unnecessary Privileges in ipython 8.2 High -
python-pyAzure Linux There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious... 6.5 Medium -
python-pyAzure Linux There's a flaw in Python 3's pydoc. A local or adjacent attacker who discovers or is able to... 5.7 Medium -
python-pyAzure Linux Web Cache Poisoning 5.9 Medium -
python-pyAzure Linux An issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7... 7.5 High -
python-pyAzure Linux python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic... 6.5 Medium -
python-pyAzure Linux ** DISPUTED ** The Wave_read._read_fmt_chunk function in Lib/wave.py in Python through 3.6.4 does... 6.5 Medium -
python-pyAzure Linux Python 2.7.14 is vulnerable to a Heap-Buffer-Overflow as well as a Heap-Use-After-Free. Python... 3.6 Low -
python-pyAzure Linux ** DISPUTED ** Lib/webbrowser.py in Python through 3.6.3 does not validate strings before... 8.8 High -
python-pyAzure Linux CPython (aka Python) up to 2.7.13 is vulnerable to an integer overflow in the... 9.8 Critical -
python-pyAzure Linux CRLF injection vulnerability in the HTTPConnection.putheader function in urllib2 and urllib in... 6.1 Medium -
python-pyAzure Linux Integer overflow in the get_data function in zipimport.c in CPython (aka Python) before 2.7.12, 3... 9.8 Critical -
python-pyAzure Linux The smtplib library in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5... 6.5 Medium -
python-pyAzure Linux The ssl.match_hostname function in CPython (aka Python) before 2.7.9 and 3.x before 3.3.3 does... 5.9 Medium -
python-pyAzure Linux Integer overflow in bufferobject.c in Python before 2.7.8 allows context-dependent attackers to... 6.4 Medium -
python-pyAzure Linux Python before 2.6.8, 2.7.x before 2.7.3, 3.x before 3.1.5, and 3.2.x before 3.2.3 computes hash... 5.0 Medium -
python-pyAzure Linux SimpleXMLRPCServer.py in SimpleXMLRPCServer in Python before 2.6.8, 2.7.x before 2.7.3, 3.x... 5.0 Medium - Show olderLoading…