python3 vulnerabilities (SUSE)
124 vulnerabilities.
python3SUSEArbitrary writes via tarfile realpath overflow9.4 Criticalpython3SUSEUse-after-free in "unicode_escape" decoder with error handler5.9 Mediumpython3SUSEURL parser allowed square brackets in domain names6.3 Mediumpython3SUSEImproper validation of IPv6 and IPvFuture addresses6.3 Mediumpython3SUSEVirtual environment (venv) activation scripts don't quote paths5.3 Mediumpython3SUSERegular-expression DoS when parsing TarFile headers7.5 Highpython3SUSEQuadratic complexity parsing cookies with backslashes7.5 Highpython3SUSEEmail header injection due to unquoted newlines5.5 Mediumpython3SUSEBuffer overread when using an empty list with SSLContext.set_npn_protocols()6.5 Mediumpython3SUSEMemory race condition in ssl.SSLContext certificate store methods7.4 Highpython3SUSEIncorrect IPv4 and IPv6 private ranges7.5 Highpython3SUSEQuoted zip-bomb protection for zipfile6.2 Mediumpython3SUSEAn issue was found in the CPython `tempfile.TemporaryDirectory` class affecting versions 3.12.2,...7.8 Highpython3SUSElibexpat through 2.5.0 allows a denial of service (resource consumption) because many full...7.5 Highpython3SUSEAn issue was discovered in Python before 3.8.18, 3.9.x before 3.9.18, 3.10.x before 3.10.13, and...5.3 Mediumpython3SUSEAn issue was discovered in Python 3.11 through 3.11.4. If a path containing '\0' bytes is passed...7.5 Highpython3SUSEAn issue was discovered in compare_digest in Lib/hmac.py in Python through 3.9.1. Constant-time...5.9 Mediumpython3SUSEThe e-mail module of Python 0 - 2.7.18, 3.x - 3.11 incorrectly parses e-mail addresses which...5.3 Mediumpython3SUSEAn issue in the urllib.parse component of Python before v3.11 allows attackers to bypass...7.5 Highpython3SUSEPython Charmers Future denial of service vulnerability7.5 Highpython3SUSEAn issue was discovered in Python before 3.11.1. An unnecessary quadratic algorithm exists in one...7.5 Highpython3SUSEBuffer overflow in sponge queue functions9.8 Criticalpython3SUSEA flaw was found in python. In algorithms with quadratic time complexity using non-binary bases,...7.5 Highpython3SUSEPython 3.x through 3.10 has an open redirection vulnerability in lib/http/server.py due to no...7.4 Highpython3SUSEIn Python (aka CPython) through 3.10.4, the mailcap module does not add escape characters into...7.6 Highpython3SUSEA flaw was found in Python, specifically within the urllib.parse module. This module helps break...7.5 Highpython3SUSEA flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in...5.3 Mediumpython3SUSEThere's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious...6.5 Mediumpython3SUSEA flaw was found in python. An improperly handled HTTP response in the HTTP client code of python...7.5 Highpython3SUSEImproper Input Validation in pip5.7 Mediumpython3SUSEThere's a flaw in Python 3's pydoc. A local or adjacent attacker who discovers or is able to...5.7 Mediumpython3SUSEWeb Cache Poisoning5.9 Mediumpython3SUSEPython 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may...9.8 Criticalpython3SUSEIn Python 3 through 3.9.0, the Lib/test/multibytecodec_support.py CJK codec tests call eval() on...9.8 Criticalpython3SUSEhttp.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x...7.2 Highpython3SUSEPath Traversal in pip7.5 Highpython3SUSEIn Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to...7.5 Highpython3SUSEIncorrect Calculation and Use of Insufficiently Random Values in Python5.9 Mediumpython3SUSELib/zipfile.py in Python through 3.7.2 allows remote attackers to cause a denial of service ...7.5 Highpython3SUSEPython 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8...6.5 Mediumpython3SUSEAn issue was discovered in urllib2 in Python 2.x through 2.7.17 and urllib in Python 3.x through...6.1 Mediumpython3SUSEThe documentation XML-RPC server in Python through 2.7.16, 3.x through 3.6.9, and 3.7.x through 3...6.1 Mediumpython3SUSEAn issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7...7.5 Highpython3SUSEIn libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing...7.5 Highpython3SUSEhttp.cookiejar.DefaultPolicy.domain_return_ok in Lib/http/cookiejar.py in Python before 3.7.3...5.3 Mediumpython3SUSEA security regression of CVE-2019-9636 was discovered in python since commit...9.8 Criticalpython3SUSEAn issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through...6.1 Mediumpython3SUSEPython 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode...9.8 Criticalpython3SUSEAn exploitable denial-of-service vulnerability exists in the X509 certificate parser of Python...5.9 Mediumpython3SUSEModules/_pickle.c in Python before 3.7.1 has an integer overflow via a large LONG_BINPUT value...7.5 High- Show moreLoading…