python3.4 vulnerabilities (Ubuntu)
127 vulnerabilities.
python3.4UbuntuTarfile infinite loop during parsing with negative member offset7.5 Highpython3.4UbuntuHTMLParser quadratic complexity when processing malformed inputs4.3 Mediumpython3.4UbuntuMishandling of comma during folding and unicode-encoding of email headers2.3 Lowpython3.4UbuntuURL parser allowed square brackets in domain names6.3 Mediumpython3.4UbuntuImproper validation of IPv6 and IPvFuture addresses6.3 Mediumpython3.4UbuntuVirtual environment (venv) activation scripts don't quote paths5.3 Mediumpython3.4UbuntuRegular-expression DoS when parsing TarFile headers7.5 Highpython3.4UbuntuQuadratic complexity parsing cookies with backslashes7.5 Highpython3.4UbuntuEmail header injection due to unquoted newlines5.5 Mediumpython3.4UbuntuBuffer overread when using an empty list with SSLContext.set_npn_protocols()6.5 Mediumpython3.4UbuntuMemory race condition in ssl.SSLContext certificate store methods7.4 Highpython3.4UbuntuIncorrect IPv4 and IPv6 private ranges7.5 Highpython3.4UbuntuQuoted zip-bomb protection for zipfile6.2 Mediumpython3.4UbuntuAn issue was found in the CPython `tempfile.TemporaryDirectory` class affecting versions 3.12.2,...7.8 Highpython3.4UbuntuAn issue was discovered in Python before 3.8.18, 3.9.x before 3.9.18, 3.10.x before 3.10.13, and...5.3 Mediumpython3.4UbuntuAn issue was discovered in compare_digest in Lib/hmac.py in Python through 3.9.1. Constant-time...5.9 Mediumpython3.4UbuntuAn XML External Entity (XXE) issue was discovered in Python through 3.9.1. The plistlib module no...9.8 Criticalpython3.4Ubunturead_ints in plistlib.py in Python through 3.9.1 is vulnerable to a potential DoS attack via CPU...6.5 Mediumpython3.4UbuntuA use-after-free exists in Python through 3.9 via heappushpop in heapq.7.5 Highpython3.4UbuntuThe e-mail module of Python 0 - 2.7.18, 3.x - 3.11 incorrectly parses e-mail addresses which...5.3 Mediumpython3.4UbuntuAn issue in the urllib.parse component of Python before v3.11 allows attackers to bypass...7.5 Highpython3.4UbuntuAn issue was discovered in Python before 3.11.1. An unnecessary quadratic algorithm exists in one...7.5 Highpython3.4UbuntuA flaw was found in python. In algorithms with quadratic time complexity using non-binary bases,...7.5 Highpython3.4UbuntuIn Python (aka CPython) through 3.10.4, the mailcap module does not add escape characters into...7.6 Highpython3.4UbuntuA flaw was found in Python, specifically within the urllib.parse module. This module helps break...7.5 Highpython3.4UbuntuA flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in...5.3 Mediumpython3.4UbuntuThere's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious...6.5 Mediumpython3.4UbuntuA flaw was found in python. An improperly handled HTTP response in the HTTP client code of python...7.5 Highpython3.4UbuntuThere's a flaw in Python 3's pydoc. A local or adjacent attacker who discovers or is able to...5.7 Mediumpython3.4UbuntuWeb Cache Poisoning5.9 Mediumpython3.4UbuntuPython 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may...9.8 Criticalpython3.4UbuntuIn Python 3 through 3.9.0, the Lib/test/multibytecodec_support.py CJK codec tests call eval() on...9.8 Criticalpython3.4Ubuntuhttp.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x...7.2 Highpython3.4UbuntuIn Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to...7.5 Highpython3.4UbuntuIncorrect Calculation and Use of Insufficiently Random Values in Python5.9 Mediumpython3.4UbuntuLib/zipfile.py in Python through 3.7.2 allows remote attackers to cause a denial of service ...7.5 Highpython3.4UbuntuPython 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8...6.5 Mediumpython3.4UbuntuAn issue was discovered in urllib2 in Python 2.x through 2.7.17 and urllib in Python 3.x through...6.1 Mediumpython3.4Ubuntulibrary/glob.html in the Python 2 and 3 documentation before 2016 has potentially misleading...7.5 Highpython3.4UbuntuThe documentation XML-RPC server in Python through 2.7.16, 3.x through 3.6.9, and 3.7.x through 3...6.1 Mediumpython3.4UbuntuAn issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7...7.5 Highpython3.4Ubuntuhttp.cookiejar.DefaultPolicy.domain_return_ok in Lib/http/cookiejar.py in Python before 3.7.3...5.3 Mediumpython3.4UbuntuA security regression of CVE-2019-9636 was discovered in python since commit...9.8 Criticalpython3.4Ubuntuurllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for...9.1 Criticalpython3.4UbuntuAn issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through...6.1 Mediumpython3.4UbuntuAn issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through...6.1 Mediumpython3.4UbuntuPython 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode...9.8 Criticalpython3.4UbuntuAn exploitable denial-of-service vulnerability exists in the X509 certificate parser of Python...5.9 Mediumpython3.4UbuntuModules/_pickle.c in Python before 3.7.1 has an integer overflow via a large LONG_BINPUT value...7.5 Highpython3.4UbuntuPython's elementtree C accelerator failed to initialise Expat's hash salt during initialization....5.3 Medium- Show moreLoading…