Skip to content
OpenAdvisories
Medium USN-4428-1 4 CVEs

python2.7, python3.4, python3.5, python3.6, python3.8 vulnerabilities

Published Jul 22, 2020 · Updated Oct 8, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Python documentation had a misleading information.
A security issue could be possibly caused by wrong assumptions of this information.
This issue only affected Ubuntu 12.04 ESM, Ubuntu 14.04 ESM, Ubuntu 16.04 LTS and
Ubuntu 18.04 LTS. (CVE-2019-17514)

It was discovered that Python incorrectly handled certain TAR archives.
An attacker could possibly use this issue to cause a denial of service.
(CVE-2019-20907)

It was discovered that incorrectly handled certain ZIP files. An attacker
could possibly use this issue to cause a denial of service. This issue only
affected Ubuntu 12.04 ESM, Ubuntu 14.04 ESM, Ubuntu 16.04 LTS and Ubuntu 18.04 LTS.
(CVE-2019-9674)

It was discovered that Python incorrectly handled certain IP values.
An attacker could possibly use this issue to cause a denial of service.
This issue only affected Ubuntu 14.04 ESM, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and
Ubuntu 20.04 LTS. (CVE-2020-14422)

Fixed packages 7

ReleasePackageFixed in
Ubuntu · 16.04 LTS 16.04:LTS python2.7 2.7.12-1ubuntu0~16.04.12
Ubuntu · 16.04 LTS 16.04:LTS python3.5 3.5.2-2ubuntu0~16.04.11
Ubuntu · 18.04 LTS 18.04:LTS python2.7 2.7.17-1~18.04ubuntu1.1
Ubuntu · 18.04 LTS 18.04:LTS python3.6 3.6.9-1~18.04ubuntu1.1
Ubuntu · 20.04 LTS 20.04:LTS python3.8 3.8.2-1ubuntu1.2
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS python2.7 2.7.6-8ubuntu0.6+esm6
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS python3.4 3.4.3-1ubuntu1~14.04.7+esm7

Vulnerabilities 4

References

  • report
    https://ubuntu.com/security/CVE-2019-9674
  • report
    https://ubuntu.com/security/CVE-2019-17514
  • report
    https://ubuntu.com/security/CVE-2019-20907
  • report
    https://ubuntu.com/security/CVE-2020-14422