python vulnerabilities (SUSE)
103 vulnerabilities.
pythonSUSEAn issue was discovered in Python before 3.11.1. An unnecessary quadratic algorithm exists in one...7.5 HighpythonSUSEPython 3.x through 3.10 has an open redirection vulnerability in lib/http/server.py due to no...7.4 HighpythonSUSEIn Python (aka CPython) through 3.10.4, the mailcap module does not add escape characters into...7.6 HighpythonSUSEA flaw was found in Python, specifically within the urllib.parse module. This module helps break...7.5 HighpythonSUSEA flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in...5.3 MediumpythonSUSEThere's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious...6.5 MediumpythonSUSEA flaw was found in python. An improperly handled HTTP response in the HTTP client code of python...7.5 HighpythonSUSEImproper Input Validation in pip5.7 MediumpythonSUSEWeb Cache Poisoning5.9 MediumpythonSUSEPython 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may...9.8 CriticalpythonSUSEhttp.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x...7.2 HighpythonSUSEPath Traversal in pip7.5 HighpythonSUSEIn Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to...7.5 HighpythonSUSELib/zipfile.py in Python through 3.7.2 allows remote attackers to cause a denial of service ...7.5 HighpythonSUSEPython 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8...6.5 MediumpythonSUSEAn issue was discovered in urllib2 in Python 2.x through 2.7.17 and urllib in Python 3.x through...6.1 MediumpythonSUSEThe documentation XML-RPC server in Python through 2.7.16, 3.x through 3.6.9, and 3.7.x through 3...6.1 MediumpythonSUSEAn issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7...7.5 HighpythonSUSEhttp.cookiejar.DefaultPolicy.domain_return_ok in Lib/http/cookiejar.py in Python before 3.7.3...5.3 MediumpythonSUSEA security regression of CVE-2019-9636 was discovered in python since commit...9.8 CriticalpythonSUSEurllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for...9.1 CriticalpythonSUSEAn issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through...6.1 MediumpythonSUSEPython 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode...9.8 CriticalpythonSUSEAn exploitable denial-of-service vulnerability exists in the X509 certificate parser of Python...5.9 MediumpythonSUSEPython's elementtree C accelerator failed to initialise Expat's hash salt during initialization....5.3 MediumpythonSUSEPython Software Foundation Python (CPython) version 2.7 contains a CWE-77: Improper...9.8 CriticalpythonSUSEpython before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic...6.5 MediumpythonSUSEpython before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic...4.3 MediumpythonSUSE** DISPUTED ** The Wave_read._read_fmt_chunk function in Lib/wave.py in Python through 3.6.4 does...6.5 MediumpythonSUSEPython 2.7.14 is vulnerable to a Heap-Buffer-Overflow as well as a Heap-Use-After-Free. Python...3.6 LowpythonSUSECPython (aka Python) up to 2.7.13 is vulnerable to an integer overflow in the...9.8 CriticalpythonSUSEThe CGIHandler class in Python before 2.7.12 does not protect against the HTTP_PROXY variable...6.1 MediumpythonSUSECRLF injection vulnerability in the HTTPConnection.putheader function in urllib2 and urllib in...6.1 MediumpythonSUSEInteger overflow in the get_data function in zipimport.c in CPython (aka Python) before 2.7.12, 3...9.8 CriticalpythonSUSEThe smtplib library in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5...6.5 MediumpythonSUSEInteger overflow in bufferobject.c in Python before 2.7.8 allows context-dependent attackers to...6.4 MediumpythonSUSEThe CGIHTTPServer module in Python 2.7.5 and 3.3.4 does not properly handle URLs in which URL...9.8 CriticalpythonSUSEThe gzip_decode function in the xmlrpc client library in Python 3.4 and earlier allows remote...7.5 HighpythonSUSEBuffer overflow in the socket.recvfrom_into function in Modules/socketmodule.c in Python 2.5...7.5 HighpythonSUSEUpdated python & python3 packages fix multiple vulnerabilitiesNo scorepythonSUSEThe ssl.match_hostname function in the SSL module in Python 2.6 through 3.4 does not properly...4.3 MediumpythonSUSEPython before 2.6.8, 2.7.x before 2.7.3, 3.x before 3.1.5, and 3.2.x before 3.2.3 computes hash...5.0 MediumpythonSUSESimpleXMLRPCServer.py in SimpleXMLRPCServer in Python before 2.6.8, 2.7.x before 2.7.3, 3.x...5.0 MediumpythonSUSEPython 2.6 through 3.2 creates ~/.pypirc with world-readable permissions before changing them...1.9 LowpythonSUSEThe SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet...4.3 MediumpythonSUSEThe urllib and urllib2 modules in Python 2.x before 2.7.2 and 3.x before 3.2.1 process Location...6.4 MediumpythonSUSEMultiple integer overflows in the PyOS_vsnprintf function in Python/mysnprintf.c in Python 2.5.2...5.0 MediumpythonSUSEMultiple integer overflows in Python before 2.5.2 might allow context-dependent attackers to have...7.5 HighpythonSUSEMultiple buffer overflows in Python 2.5.2 and earlier on 32bit platforms allow context-dependent...7.5 HighpythonSUSEInteger overflow in _hashopenssl.c in the hashlib module in Python 2.5.2 and earlier might allow...7.5 High- Show moreLoading…