python3.5 vulnerabilities (Ubuntu)
126 vulnerabilities.
python3.5UbuntuTarfile infinite loop during parsing with negative member offset7.5 Highpython3.5UbuntuHTMLParser quadratic complexity when processing malformed inputs4.3 Mediumpython3.5UbuntuMishandling of comma during folding and unicode-encoding of email headers2.3 Lowpython3.5UbuntuURL parser allowed square brackets in domain names6.3 Mediumpython3.5UbuntuImproper validation of IPv6 and IPvFuture addresses6.3 Mediumpython3.5UbuntuVirtual environment (venv) activation scripts don't quote paths5.3 Mediumpython3.5UbuntuRegular-expression DoS when parsing TarFile headers7.5 Highpython3.5UbuntuQuadratic complexity parsing cookies with backslashes7.5 Highpython3.5UbuntuEmail header injection due to unquoted newlines5.5 Mediumpython3.5UbuntuBuffer overread when using an empty list with SSLContext.set_npn_protocols()6.5 Mediumpython3.5UbuntuIncorrect IPv4 and IPv6 private ranges7.5 Highpython3.5UbuntuQuoted zip-bomb protection for zipfile6.2 Mediumpython3.5UbuntuAn issue was found in the CPython `tempfile.TemporaryDirectory` class affecting versions 3.12.2,...7.8 Highpython3.5UbuntuGroups not dropped before running subprocess when using empty 'extra_groups' parameter6.1 Mediumpython3.5UbuntuAn issue was discovered in Python before 3.8.18, 3.9.x before 3.9.18, 3.10.x before 3.10.13, and...5.3 Mediumpython3.5UbuntuAn issue was discovered in Python 3.11 through 3.11.4. If a path containing '\0' bytes is passed...7.5 Highpython3.5UbuntuAn issue was discovered in compare_digest in Lib/hmac.py in Python through 3.9.1. Constant-time...5.9 Mediumpython3.5UbuntuAn XML External Entity (XXE) issue was discovered in Python through 3.9.1. The plistlib module no...9.8 Criticalpython3.5Ubunturead_ints in plistlib.py in Python through 3.9.1 is vulnerable to a potential DoS attack via CPU...6.5 Mediumpython3.5UbuntuA use-after-free exists in Python through 3.9 via heappushpop in heapq.7.5 Highpython3.5UbuntuThe e-mail module of Python 0 - 2.7.18, 3.x - 3.11 incorrectly parses e-mail addresses which...5.3 Mediumpython3.5UbuntuAn issue in the urllib.parse component of Python before v3.11 allows attackers to bypass...7.5 Highpython3.5UbuntuAn issue was discovered in Python before 3.11.1. An unnecessary quadratic algorithm exists in one...7.5 Highpython3.5UbuntuPython 3.9.x and 3.10.x through 3.10.8 on Linux allows local privilege escalation in a non...7.8 Highpython3.5UbuntuA flaw was found in python. In algorithms with quadratic time complexity using non-binary bases,...7.5 Highpython3.5UbuntuPython 3.x through 3.10 has an open redirection vulnerability in lib/http/server.py due to no...7.4 Highpython3.5UbuntuIn Python (aka CPython) through 3.10.4, the mailcap module does not add escape characters into...7.6 Highpython3.5UbuntuA flaw was found in Python, specifically within the urllib.parse module. This module helps break...7.5 Highpython3.5UbuntuA flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in...5.3 Mediumpython3.5UbuntuThere's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious...6.5 Mediumpython3.5UbuntuA flaw was found in python. An improperly handled HTTP response in the HTTP client code of python...7.5 Highpython3.5UbuntuImproper input validation of octal strings in Python stdlib ipaddress 3.10 and below allows...9.8 Criticalpython3.5UbuntuThere's a flaw in Python 3's pydoc. A local or adjacent attacker who discovers or is able to...5.7 Mediumpython3.5UbuntuWeb Cache Poisoning5.9 Mediumpython3.5UbuntuPython 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may...9.8 Criticalpython3.5UbuntuIn Python 3 through 3.9.0, the Lib/test/multibytecodec_support.py CJK codec tests call eval() on...9.8 Criticalpython3.5Ubuntuhttp.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x...7.2 Highpython3.5UbuntuIn Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to...7.5 Highpython3.5UbuntuIncorrect Calculation and Use of Insufficiently Random Values in Python5.9 Mediumpython3.5UbuntuLib/zipfile.py in Python through 3.7.2 allows remote attackers to cause a denial of service ...7.5 Highpython3.5UbuntuPython 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8...6.5 Mediumpython3.5UbuntuAn issue was discovered in urllib2 in Python 2.x through 2.7.17 and urllib in Python 3.x through...6.1 Mediumpython3.5Ubuntulibrary/glob.html in the Python 2 and 3 documentation before 2016 has potentially misleading...7.5 Highpython3.5UbuntuThe documentation XML-RPC server in Python through 2.7.16, 3.x through 3.6.9, and 3.7.x through 3...6.1 Mediumpython3.5UbuntuAn issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7...7.5 Highpython3.5Ubuntuhttp.cookiejar.DefaultPolicy.domain_return_ok in Lib/http/cookiejar.py in Python before 3.7.3...5.3 Mediumpython3.5UbuntuA security regression of CVE-2019-9636 was discovered in python since commit...9.8 Criticalpython3.5Ubuntuurllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for...9.1 Criticalpython3.5UbuntuAn issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through...6.1 Mediumpython3.5UbuntuAn issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through...6.1 Medium- Show moreLoading…