python2.7 vulnerabilities (Ubuntu)
126 vulnerabilities.
python2.7UbuntuHTMLParser quadratic complexity when processing malformed inputs4.3 Mediumpython2.7UbuntuURL parser allowed square brackets in domain names6.3 Mediumpython2.7Ubuntupython2.7 regresssionsNo scorepython2.7UbuntuImproper validation of IPv6 and IPvFuture addresses6.3 Mediumpython2.7UbuntuVirtual environment (venv) activation scripts don't quote paths5.3 Mediumpython2.7UbuntuRegular-expression DoS when parsing TarFile headers7.5 Highpython2.7UbuntuQuadratic complexity parsing cookies with backslashes7.5 Highpython2.7UbuntuEmail header injection due to unquoted newlines5.5 Mediumpython2.7UbuntuBuffer overread when using an empty list with SSLContext.set_npn_protocols()6.5 Mediumpython2.7UbuntuMemory race condition in ssl.SSLContext certificate store methods7.4 Highpython2.7UbuntuQuoted zip-bomb protection for zipfile6.2 Mediumpython2.7UbuntuAn issue was discovered in Python before 3.8.18, 3.9.x before 3.9.18, 3.10.x before 3.10.13, and...5.3 Mediumpython2.7UbuntuAn issue was discovered in compare_digest in Lib/hmac.py in Python through 3.9.1. Constant-time...5.9 Mediumpython2.7UbuntuAn XML External Entity (XXE) issue was discovered in Python through 3.9.1. The plistlib module no...9.8 Criticalpython2.7Ubunturead_ints in plistlib.py in Python through 3.9.1 is vulnerable to a potential DoS attack via CPU...6.5 Mediumpython2.7UbuntuA use-after-free exists in Python through 3.9 via heappushpop in heapq.7.5 Highpython2.7UbuntuThe e-mail module of Python 0 - 2.7.18, 3.x - 3.11 incorrectly parses e-mail addresses which...5.3 Mediumpython2.7UbuntuAn issue in the urllib.parse component of Python before v3.11 allows attackers to bypass...7.5 Highpython2.7UbuntuAn issue was discovered in Python before 3.11.1. An unnecessary quadratic algorithm exists in one...7.5 Highpython2.7UbuntuBuffer overflow in sponge queue functions9.8 Criticalpython2.7UbuntuA flaw was found in python. In algorithms with quadratic time complexity using non-binary bases,...7.5 Highpython2.7UbuntuIn Python (aka CPython) through 3.10.4, the mailcap module does not add escape characters into...7.6 Highpython2.7UbuntuA flaw was found in Python, specifically within the urllib.parse module. This module helps break...7.5 Highpython2.7UbuntuA flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in...5.3 Mediumpython2.7UbuntuThere's a flaw in Python 3's pydoc. A local or adjacent attacker who discovers or is able to...5.7 Mediumpython2.7Ubuntupython2.7 regressionNo scorepython2.7UbuntuWeb Cache Poisoning5.9 Mediumpython2.7UbuntuPython 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may...9.8 Criticalpython2.7UbuntuIn Python 3 through 3.9.0, the Lib/test/multibytecodec_support.py CJK codec tests call eval() on...9.8 Criticalpython2.7Ubuntuhttp.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x...7.2 Highpython2.7UbuntuIn Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to...7.5 Highpython2.7UbuntuIncorrect Calculation and Use of Insufficiently Random Values in Python5.9 Mediumpython2.7UbuntuLib/zipfile.py in Python through 3.7.2 allows remote attackers to cause a denial of service ...7.5 Highpython2.7UbuntuPython 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8...6.5 Mediumpython2.7UbuntuAn issue was discovered in urllib2 in Python 2.x through 2.7.17 and urllib in Python 3.x through...6.1 Mediumpython2.7Ubuntulibrary/glob.html in the Python 2 and 3 documentation before 2016 has potentially misleading...7.5 Highpython2.7UbuntuThe documentation XML-RPC server in Python through 2.7.16, 3.x through 3.6.9, and 3.7.x through 3...6.1 Mediumpython2.7UbuntuAn issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7...7.5 Highpython2.7Ubuntuhttp.cookiejar.DefaultPolicy.domain_return_ok in Lib/http/cookiejar.py in Python before 3.7.3...5.3 Mediumpython2.7UbuntuA security regression of CVE-2019-9636 was discovered in python since commit...9.8 Criticalpython2.7Ubuntuurllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for...9.1 Criticalpython2.7UbuntuAn issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through...6.1 Mediumpython2.7UbuntuAn issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through...6.1 Mediumpython2.7UbuntuPython 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode...9.8 Criticalpython2.7UbuntuAn exploitable denial-of-service vulnerability exists in the X509 certificate parser of Python...5.9 Mediumpython2.7UbuntuModules/_pickle.c in Python before 3.7.1 has an integer overflow via a large LONG_BINPUT value...7.5 Highpython2.7UbuntuPython's elementtree C accelerator failed to initialise Expat's hash salt during initialization....5.3 Mediumpython2.7UbuntuPython Software Foundation Python (CPython) version 2.7 contains a CWE-77: Improper...9.8 Criticalpython2.7Ubuntupython before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic...6.5 Mediumpython2.7Ubuntupython before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic...4.3 Medium- Show moreLoading…