Summary
It was discovered that Python incorrectly handled certain pickle files. An
attacker could possibly use this issue to consume memory, leading to a
denial of service. This issue only affected Ubuntu 16.04 LTS and Ubuntu
18.04 LTS. (CVE-2018-20406)
It was discovered that Python incorrectly validated the domain when
handling cookies. An attacker could possibly trick Python into sending
cookies to the wrong domain. (CVE-2018-20852)
Jonathan Birch and Panayiotis Panayiotou discovered that Python incorrectly
handled Unicode encoding during NFKC normalization. An attacker could
possibly use this issue to obtain sensitive information. (CVE-2019-9636,
CVE-2019-10160)
Colin Read and Nicolas Edet discovered that Python incorrectly handled
parsing certain X509 certificates. An attacker could possibly use this
issue to cause Python to crash, resulting in a denial of service. This
issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2019-5010)
It was discovered that Python incorrectly handled certain urls. A remote
attacker could possibly use this issue to perform CRLF injection attacks.
(CVE-2019-9740, CVE-2019-9947)
Sihoon Lee discovered that Python incorrectly handled the local_file:
scheme. A remote attacker could possibly use this issue to bypass blocklist
meschanisms. (CVE-2019-9948)
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | python2.7 | 2.7.12-1ubuntu0~16.04.8 |
| Ubuntu · 16.04 LTS 16.04:LTS | python3.5 | 3.5.2-2ubuntu0~16.04.8 |
| Ubuntu · 18.04 LTS 18.04:LTS | python2.7 | 2.7.15-4ubuntu4~18.04.1 |
| Ubuntu · 18.04 LTS 18.04:LTS | python3.6 | 3.6.8-1~18.04.2 |
Vulnerabilities 8
-
Critical 9.8
A security regression of CVE-2019-9636 was discovered in python since commit d537ab0ff9767ef024f26246899728f0116b1ec3 a…
-
Critical 9.1CVE-2019-9948 EPSS 12%
urllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for remote attackers to bypa…
-
Medium 6.5
An issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through 3.7.3. CRLF injection …
-
Medium 5.9
An exploitable denial-of-service vulnerability exists in the X509 certificate parser of Python.org Python 2.7.11 / 3.6.…
-
Medium 5.4
An issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through 3.7.3. CRLF injection …
-
Medium 5.3
Python 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode Encoding (with an incorr…
-
Medium 4.3
http.cookiejar.DefaultPolicy.domain_return_ok in Lib/http/cookiejar.py in Python before 3.7.3 does not correctly valida…
-
Unscored —
Modules/_pickle.c in Python before 3.7.1 has an integer overflow via a large LONG_BINPUT value that is mishandled durin…
References
-
report
https://ubuntu.com/security/CVE-2018-20406
-
report
https://ubuntu.com/security/CVE-2018-20852
-
report
https://ubuntu.com/security/CVE-2019-5010
-
report
https://ubuntu.com/security/CVE-2019-9636
-
report
https://ubuntu.com/security/CVE-2019-9740
-
report
https://ubuntu.com/security/CVE-2019-9947
-
report
https://ubuntu.com/security/CVE-2019-9948
-
report
https://ubuntu.com/security/CVE-2019-10160