python3 vulnerabilities (Red Hat)
100 vulnerabilities.
python3Red HatExtraction filter bypass for linking outside extraction directory7.5 Highpython3Red HatArbitrary writes via tarfile realpath overflow9.4 Criticalpython3Red HatURL parser allowed square brackets in domain names6.3 Mediumpython3Red HatUnbounded memory buffering in SelectorSocketTransport.writelines()8.7 Highpython3Red HatImproper validation of IPv6 and IPvFuture addresses6.3 Mediumpython3Red HatVirtual environment (venv) activation scripts don't quote paths5.3 Mediumpython3Red HatRegular-expression DoS when parsing TarFile headers7.5 Highpython3Red HatInfinite loop when iterating over zip archive entry names from zipfile.Path8.7 Highpython3Red HatQuadratic complexity parsing cookies with backslashes7.5 Highpython3Red HatEmail header injection due to unquoted newlines5.5 Mediumpython3Red HatBuffer overread when using an empty list with SSLContext.set_npn_protocols()6.5 Mediumpython3Red HatMemory race condition in ssl.SSLContext certificate store methods7.4 Highpython3Red HatIncorrect IPv4 and IPv6 private ranges7.5 Highpython3Red HatQuoted zip-bomb protection for zipfile6.2 Mediumpython3Red HatAn issue was found in the CPython `tempfile.TemporaryDirectory` class affecting versions 3.12.2,...7.8 Highpython3Red HatAn issue was discovered in Python before 3.8.18, 3.9.x before 3.9.18, 3.10.x before 3.10.13, and...5.3 Mediumpython3Red Hatread_ints in plistlib.py in Python through 3.9.1 is vulnerable to a potential DoS attack via CPU...6.5 Mediumpython3Red HatA use-after-free exists in Python through 3.9 via heappushpop in heapq.7.5 Highpython3Red HatThe e-mail module of Python 0 - 2.7.18, 3.x - 3.11 incorrectly parses e-mail addresses which...5.3 Mediumpython3Red HatAn issue in the urllib.parse component of Python before v3.11 allows attackers to bypass...7.5 Highpython3Red HatAn issue was discovered in Python before 3.11.1. An unnecessary quadratic algorithm exists in one...7.5 Highpython3Red HatPython 3.9.x and 3.10.x through 3.10.8 on Linux allows local privilege escalation in a non...7.8 Highpython3Red HatA flaw was found in python. In algorithms with quadratic time complexity using non-binary bases,...7.5 Highpython3Red HatPython 3.x through 3.10 has an open redirection vulnerability in lib/http/server.py due to no...7.4 Highpython3Red HatIn Python (aka CPython) through 3.10.4, the mailcap module does not add escape characters into...7.6 Highpython3Red HatA flaw was found in Python, specifically within the urllib.parse module. This module helps break...7.5 Highpython3Red HatA flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in...5.3 Mediumpython3Red HatThere's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious...6.5 Mediumpython3Red HatA flaw was found in python. An improperly handled HTTP response in the HTTP client code of python...7.5 Highpython3Red HatThere's a flaw in Python 3's pydoc. A local or adjacent attacker who discovers or is able to...5.7 Mediumpython3Red HatWeb Cache Poisoning5.9 Mediumpython3Red HatPython 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may...9.8 Criticalpython3Red HatIn Python 3 through 3.9.0, the Lib/test/multibytecodec_support.py CJK codec tests call eval() on...9.8 Criticalpython3Red Hathttp.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x...7.2 Highpython3Red HatIn Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to...7.5 Highpython3Red HatIncorrect Calculation and Use of Insufficiently Random Values in Python5.9 Mediumpython3Red HatPython 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8...6.5 Mediumpython3Red HatThe documentation XML-RPC server in Python through 2.7.16, 3.x through 3.6.9, and 3.7.x through 3...6.1 Mediumpython3Red HatAn issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7...7.5 Highpython3Red Hathttp.cookiejar.DefaultPolicy.domain_return_ok in Lib/http/cookiejar.py in Python before 3.7.3...5.3 Mediumpython3Red Haturllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for...9.1 Criticalpython3Red HatAn issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through...6.1 Mediumpython3Red HatAn issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through...6.1 Mediumpython3Red HatPython 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode...9.8 Criticalpython3Red HatAn exploitable denial-of-service vulnerability exists in the X509 certificate parser of Python...5.9 Mediumpython3Red HatDirectory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile...6.8 Medium