python36-core vulnerabilities (SUSE)
89 vulnerabilities.
python36-coreSUSEArbitrary writes via tarfile realpath overflow9.4 Criticalpython36-coreSUSEUse-after-free in "unicode_escape" decoder with error handler5.9 Mediumpython36-coreSUSEURL parser allowed square brackets in domain names6.3 Mediumpython36-coreSUSEImproper validation of IPv6 and IPvFuture addresses6.3 Mediumpython36-coreSUSEVirtual environment (venv) activation scripts don't quote paths5.3 Mediumpython36-coreSUSERegular-expression DoS when parsing TarFile headers7.5 Highpython36-coreSUSEQuadratic complexity parsing cookies with backslashes7.5 Highpython36-coreSUSEEmail header injection due to unquoted newlines5.5 Mediumpython36-coreSUSEBuffer overread when using an empty list with SSLContext.set_npn_protocols()6.5 Mediumpython36-coreSUSEMemory race condition in ssl.SSLContext certificate store methods7.4 Highpython36-coreSUSEIncorrect IPv4 and IPv6 private ranges7.5 Highpython36-coreSUSEQuoted zip-bomb protection for zipfile6.2 Mediumpython36-coreSUSEAn issue was found in the CPython `tempfile.TemporaryDirectory` class affecting versions 3.12.2,...7.8 Highpython36-coreSUSElibexpat through 2.5.0 allows a denial of service (resource consumption) because many full...7.5 Highpython36-coreSUSEAn issue was discovered in Python before 3.8.18, 3.9.x before 3.9.18, 3.10.x before 3.10.13, and...5.3 Mediumpython36-coreSUSEAn issue was discovered in compare_digest in Lib/hmac.py in Python through 3.9.1. Constant-time...5.9 Mediumpython36-coreSUSEThe e-mail module of Python 0 - 2.7.18, 3.x - 3.11 incorrectly parses e-mail addresses which...5.3 Mediumpython36-coreSUSEAn issue in the urllib.parse component of Python before v3.11 allows attackers to bypass...7.5 Highpython36-coreSUSEAn issue was discovered in Python before 3.11.1. An unnecessary quadratic algorithm exists in one...7.5 Highpython36-coreSUSEBuffer overflow in sponge queue functions9.8 Criticalpython36-coreSUSEA flaw was found in python. In algorithms with quadratic time complexity using non-binary bases,...7.5 Highpython36-coreSUSEPython 3.x through 3.10 has an open redirection vulnerability in lib/http/server.py due to no...7.4 Highpython36-coreSUSEIn Python (aka CPython) through 3.10.4, the mailcap module does not add escape characters into...7.6 Highpython36-coreSUSEThere's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious...6.5 Mediumpython36-coreSUSEA flaw was found in python. An improperly handled HTTP response in the HTTP client code of python...7.5 Highpython36-coreSUSEImproper Input Validation in pip5.7 Mediumpython36-coreSUSEThere's a flaw in Python 3's pydoc. A local or adjacent attacker who discovers or is able to...5.7 Mediumpython36-coreSUSEWeb Cache Poisoning5.9 Mediumpython36-coreSUSEPython 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may...9.8 Criticalpython36-coreSUSEIn Python 3 through 3.9.0, the Lib/test/multibytecodec_support.py CJK codec tests call eval() on...9.8 Criticalpython36-coreSUSEhttp.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x...7.2 Highpython36-coreSUSEPath Traversal in pip7.5 Highpython36-coreSUSEIn Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to...7.5 Highpython36-coreSUSEIncorrect Calculation and Use of Insufficiently Random Values in Python5.9 Mediumpython36-coreSUSEPython 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8...6.5 Mediumpython36-coreSUSEAn issue was discovered in urllib2 in Python 2.x through 2.7.17 and urllib in Python 3.x through...6.1 Mediumpython36-coreSUSEAn issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7...7.5 Highpython36-coreSUSEAn exploitable denial-of-service vulnerability exists in the X509 certificate parser of Python...5.9 Mediumpython36-coreSUSEDirectory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile...6.8 Medium