python36 vulnerabilities (SUSE)
98 vulnerabilities.
python36SUSEArbitrary writes via tarfile realpath overflow9.4 Criticalpython36SUSEUse-after-free in "unicode_escape" decoder with error handler5.9 Mediumpython36SUSEURL parser allowed square brackets in domain names6.3 Mediumpython36SUSEImproper validation of IPv6 and IPvFuture addresses6.3 Mediumpython36SUSEVirtual environment (venv) activation scripts don't quote paths5.3 Mediumpython36SUSERegular-expression DoS when parsing TarFile headers7.5 Highpython36SUSEQuadratic complexity parsing cookies with backslashes7.5 Highpython36SUSEEmail header injection due to unquoted newlines5.5 Mediumpython36SUSEBuffer overread when using an empty list with SSLContext.set_npn_protocols()6.5 Mediumpython36SUSEMemory race condition in ssl.SSLContext certificate store methods7.4 Highpython36SUSEIncorrect IPv4 and IPv6 private ranges7.5 Highpython36SUSEQuoted zip-bomb protection for zipfile6.2 Mediumpython36SUSEAn issue was found in the CPython `tempfile.TemporaryDirectory` class affecting versions 3.12.2,...7.8 Highpython36SUSElibexpat through 2.5.0 allows a denial of service (resource consumption) because many full...7.5 Highpython36SUSEAn issue was discovered in Python before 3.8.18, 3.9.x before 3.9.18, 3.10.x before 3.10.13, and...5.3 Mediumpython36SUSEAn issue was discovered in compare_digest in Lib/hmac.py in Python through 3.9.1. Constant-time...5.9 Mediumpython36SUSEThe e-mail module of Python 0 - 2.7.18, 3.x - 3.11 incorrectly parses e-mail addresses which...5.3 Mediumpython36SUSEAn issue in the urllib.parse component of Python before v3.11 allows attackers to bypass...7.5 Highpython36SUSEAn issue was discovered in Python before 3.11.1. An unnecessary quadratic algorithm exists in one...7.5 Highpython36SUSEBuffer overflow in sponge queue functions9.8 Criticalpython36SUSEA flaw was found in python. In algorithms with quadratic time complexity using non-binary bases,...7.5 Highpython36SUSEPython 3.x through 3.10 has an open redirection vulnerability in lib/http/server.py due to no...7.4 Highpython36SUSEIn Python (aka CPython) through 3.10.4, the mailcap module does not add escape characters into...7.6 Highpython36SUSEThere's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious...6.5 Mediumpython36SUSEA flaw was found in python. An improperly handled HTTP response in the HTTP client code of python...7.5 Highpython36SUSEImproper Input Validation in pip5.7 Mediumpython36SUSEThere's a flaw in Python 3's pydoc. A local or adjacent attacker who discovers or is able to...5.7 Mediumpython36SUSEWeb Cache Poisoning5.9 Mediumpython36SUSEPython 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may...9.8 Criticalpython36SUSEIn Python 3 through 3.9.0, the Lib/test/multibytecodec_support.py CJK codec tests call eval() on...9.8 Criticalpython36SUSEhttp.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x...7.2 Highpython36SUSEPath Traversal in pip7.5 Highpython36SUSEIn Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to...7.5 Highpython36SUSEIncorrect Calculation and Use of Insufficiently Random Values in Python5.9 Mediumpython36SUSELib/zipfile.py in Python through 3.7.2 allows remote attackers to cause a denial of service ...7.5 Highpython36SUSEPython 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8...6.5 Mediumpython36SUSEAn issue was discovered in urllib2 in Python 2.x through 2.7.17 and urllib in Python 3.x through...6.1 Mediumpython36SUSEAn issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7...7.5 Highpython36SUSEIn libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing...7.5 Highpython36SUSEhttp.cookiejar.DefaultPolicy.domain_return_ok in Lib/http/cookiejar.py in Python before 3.7.3...5.3 Mediumpython36SUSEA security regression of CVE-2019-9636 was discovered in python since commit...9.8 Criticalpython36SUSEAn issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through...6.1 Mediumpython36SUSEPython 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode...9.8 Criticalpython36SUSEAn exploitable denial-of-service vulnerability exists in the X509 certificate parser of Python...5.9 Mediumpython36SUSEPython Software Foundation Python (CPython) version 2.7 contains a CWE-77: Improper...9.8 Criticalpython36SUSEpython before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic...4.3 Mediumpython36SUSE** DISPUTED ** The Wave_read._read_fmt_chunk function in Lib/wave.py in Python through 3.6.4 does...6.5 Mediumpython36SUSEDirectory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile...6.8 Medium