Published: 13/04/2022 Updated: 07/11/2023

CVSS v2 Base Score: 8 | Impact Score: 8.5 | Exploitability Score: 8

CVSS v3 Base Score: 7.6 | Impact Score: 4.7 | Exploitability Score: 2.8

VMScore: 713

Vector: AV:N/AC:L/Au:S/C:P/I:C/A:P

In Python (aka CPython) up to 3.10.8, the mailcap module does not add escape characters into commands discovered in the system mailcap file. This may allow malicious users to inject shell commands into applications that call mailcap.findmatch with untrusted input (if they lack validation of user-provided filenames or arguments). The fix is also back-ported to 3.7, 3.8, 3.9

Vulnerable Product	Search on Vulmon	Subscribe to Product
python python
netapp snapcenter -
netapp ontap select deploy administration utility -
netapp active iq unified manager -
fedoraproject fedora 35
fedoraproject fedora 36
fedoraproject fedora 37

Synopsis Moderate: python39:39 and python39-devel:39 security update Type/Severity Security Advisory: Moderate Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for the python39:39 and python39-devel:39 modules is now available for Red Hat Enterprise L ...

Synopsis Moderate: Red Hat Advanced Cluster Management 253 security fixes and bug fixes Type/Severity Security Advisory: Moderate Topic Red Hat Advanced Cluster Management for Kubernetes 253 GeneralAvailability release images, which fix security issues and bugs, as well as update container imagesRed Hat Product Security has rated this up ...

Synopsis Moderate: Moderate:OpenShift Container Platform 4115 security and extras update Type/Severity Security Advisory: Moderate Topic Red Hat OpenShift Container Platform release 4115 is now available withupdates to packages and images that fix several bugs and add enhancementsThis release includes a security update for Red Hat OpenSh ...

Synopsis Moderate: RHACS 372 enhancement and security update Type/Severity Security Advisory: Moderate Topic Updated images are now available for Red Hat Advanced Cluster Security for Kubernetes (RHACS) The updated image includes new features and bug fixesRed Hat Product Security has rated this update as having a security impact of Moderat ...

Synopsis Important: Red Hat OpenShift Data Foundation 4130 security and bug fix update Type/Severity Security Advisory: Important Topic Updated images that include numerous enhancements, security, and bug fixes are now available in Red Hat Container Registry for Red Hat OpenShift Data Foundation 4130 on Red Hat Enterprise Linux 9Red Hat ...

Synopsis Moderate: RHOSDT 260 operator/operand containers Security Update Type/Severity Security Advisory: Moderate Topic An update is now available for Red Hat Openshift distributed tracing 260Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring System (CVSS) base score, w ...

Synopsis Important: OpenShift Virtualization 4120 Images security update Type/Severity Security Advisory: Important Topic Red Hat OpenShift Virtualization release 412 is now available with updates to packages and images that fix several bugs and add enhancementsRed Hat Product Security has rated this update as having a security impact of ...

Synopsis Moderate: rh-python38-python security update Type/Severity Security Advisory: Moderate Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for rh-python38-python is now available for Red Hat Software CollectionsRed Hat Product Security has rated th ...

Synopsis Critical: Red Hat Advanced Cluster Management 246 security update and bug fixes Type/Severity Security Advisory: Critical Topic Red Hat Advanced Cluster Management for Kubernetes 246 GeneralAvailability release images, which fix bugs and update container imagesRed Hat Product Security has rated this update as having a security i ...

Synopsis Moderate: Openshift Logging Bug Fix Release and Security Update (5312) Type/Severity Security Advisory: Moderate Topic An update is now available for OpenShift Logging 5312Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring System (CVSS) base score, which gives a ...

概要 Moderate: OpenShift sandboxed containers 131 security fix and bug fix update タイプ/重大度 Security Advisory: Moderate トピック OpenShift sandboxed containers 131 is now available 説明 OpenShift sandboxed containers support for OpenShift Container Platformprovides users with built-in support for running Kata containe ...

Synopsis Moderate: OpenShift Container Platform 4115 bug fix and security update Type/Severity Security Advisory: Moderate Topic Red Hat OpenShift Container Platform release 4115 is now available withupdates to packages and images that fix several bugs and add enhancementsThis release includes a security update for Red Hat OpenShift Cont ...

Synopsis Moderate: python38:38 and python38-devel:38 security update Type/Severity Security Advisory: Moderate Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for the python38:38 and python38-devel:38 modules is now available for Red Hat Enterprise L ...

Synopsis Moderate: OpenShift Virtualization 4111 security and bug fix update Type/Severity Security Advisory: Moderate Topic Red Hat OpenShift Virtualization release 4111 is now available with updates to packages and images that fix several bugs and add enhancementsRed Hat Product Security has rated this update as having a security impac ...

Synopsis Moderate: python3 security update Type/Severity Security Advisory: Moderate Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for python3 is now available for Red Hat Enterprise Linux 8Red Hat Product Security has rated this update as having a se ...

Synopsis Moderate: python39 security, bug fix, and enhancement update Type/Severity Security Advisory: Moderate Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for python39 is now available for Red Hat Enterprise Linux 9Red Hat Product Security has ra ...

Synopsis Moderate: Red Hat Advanced Cluster Management 262 security update and bug fixes Type/Severity Security Advisory: Moderate Topic Red Hat Advanced Cluster Management for Kubernetes 262 GeneralAvailability release images, which fix bugs and update container imagesRed Hat Product Security has rated this update as having a security i ...

Critical Infrastructure Sectors: Critical Manufacturing

Scan for python installations on macOS, and run CVE-2015-20107.py script to report if patching is needed

Snake-Patrol Scan for python installations on macOS, and run CVE-2015-20107py script to report if patching is needed

Scan for python installations on macOS, and run CVE-2015-20107.py script to report if patching is needed

Python Patrol Scan for python installations on macOS, and run CVE-2015-20107py script to report if patching is needed These scripts need Full Disk Access permissions and must be run as root so it can scan the entire macOS filesystem (except the areas restricted by macOS) Make sure to run this from an app with Full Disk Access permission - ie ensure iTermapp has Full Disk Ac

Get Started

CVE-2015-20107

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

ICS Advisories

Github Repositories

References

Vulmon Search

About

Products

Connect