python3-libs vulnerabilities (Red Hat)
100 vulnerabilities.
python3-libsRed HatExtraction filter bypass for linking outside extraction directory7.5 Highpython3-libsRed HatArbitrary writes via tarfile realpath overflow9.4 Criticalpython3-libsRed HatURL parser allowed square brackets in domain names6.3 Mediumpython3-libsRed HatUnbounded memory buffering in SelectorSocketTransport.writelines()8.7 Highpython3-libsRed HatImproper validation of IPv6 and IPvFuture addresses6.3 Mediumpython3-libsRed HatVirtual environment (venv) activation scripts don't quote paths5.3 Mediumpython3-libsRed HatRegular-expression DoS when parsing TarFile headers7.5 Highpython3-libsRed HatInfinite loop when iterating over zip archive entry names from zipfile.Path8.7 Highpython3-libsRed HatQuadratic complexity parsing cookies with backslashes7.5 Highpython3-libsRed HatEmail header injection due to unquoted newlines5.5 Mediumpython3-libsRed HatBuffer overread when using an empty list with SSLContext.set_npn_protocols()6.5 Mediumpython3-libsRed HatMemory race condition in ssl.SSLContext certificate store methods7.4 Highpython3-libsRed HatIncorrect IPv4 and IPv6 private ranges7.5 Highpython3-libsRed HatQuoted zip-bomb protection for zipfile6.2 Mediumpython3-libsRed HatAn issue was found in the CPython `tempfile.TemporaryDirectory` class affecting versions 3.12.2,...7.8 Highpython3-libsRed HatAn issue was discovered in Python before 3.8.18, 3.9.x before 3.9.18, 3.10.x before 3.10.13, and...5.3 Mediumpython3-libsRed Hatread_ints in plistlib.py in Python through 3.9.1 is vulnerable to a potential DoS attack via CPU...6.5 Mediumpython3-libsRed HatA use-after-free exists in Python through 3.9 via heappushpop in heapq.7.5 Highpython3-libsRed HatThe e-mail module of Python 0 - 2.7.18, 3.x - 3.11 incorrectly parses e-mail addresses which...5.3 Mediumpython3-libsRed HatAn issue in the urllib.parse component of Python before v3.11 allows attackers to bypass...7.5 Highpython3-libsRed HatAn issue was discovered in Python before 3.11.1. An unnecessary quadratic algorithm exists in one...7.5 Highpython3-libsRed HatPython 3.9.x and 3.10.x through 3.10.8 on Linux allows local privilege escalation in a non...7.8 Highpython3-libsRed HatA flaw was found in python. In algorithms with quadratic time complexity using non-binary bases,...7.5 Highpython3-libsRed HatPython 3.x through 3.10 has an open redirection vulnerability in lib/http/server.py due to no...7.4 Highpython3-libsRed HatIn Python (aka CPython) through 3.10.4, the mailcap module does not add escape characters into...7.6 Highpython3-libsRed HatA flaw was found in Python, specifically within the urllib.parse module. This module helps break...7.5 Highpython3-libsRed HatA flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in...5.3 Mediumpython3-libsRed HatThere's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious...6.5 Mediumpython3-libsRed HatA flaw was found in python. An improperly handled HTTP response in the HTTP client code of python...7.5 Highpython3-libsRed HatThere's a flaw in Python 3's pydoc. A local or adjacent attacker who discovers or is able to...5.7 Mediumpython3-libsRed HatWeb Cache Poisoning5.9 Mediumpython3-libsRed HatPython 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may...9.8 Criticalpython3-libsRed HatIn Python 3 through 3.9.0, the Lib/test/multibytecodec_support.py CJK codec tests call eval() on...9.8 Criticalpython3-libsRed Hathttp.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x...7.2 Highpython3-libsRed HatIn Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to...7.5 Highpython3-libsRed HatIncorrect Calculation and Use of Insufficiently Random Values in Python5.9 Mediumpython3-libsRed HatPython 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8...6.5 Mediumpython3-libsRed HatThe documentation XML-RPC server in Python through 2.7.16, 3.x through 3.6.9, and 3.7.x through 3...6.1 Mediumpython3-libsRed HatAn issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7...7.5 Highpython3-libsRed Hathttp.cookiejar.DefaultPolicy.domain_return_ok in Lib/http/cookiejar.py in Python before 3.7.3...5.3 Mediumpython3-libsRed Haturllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for...9.1 Criticalpython3-libsRed HatAn issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through...6.1 Mediumpython3-libsRed HatAn issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through...6.1 Mediumpython3-libsRed HatPython 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode...9.8 Criticalpython3-libsRed HatAn exploitable denial-of-service vulnerability exists in the X509 certificate parser of Python...5.9 Mediumpython3-libsRed HatDirectory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile...6.8 Medium