Published: 23/10/2019 Updated: 07/11/2023

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 6.1 | Impact Score: 2.7 | Exploitability Score: 2.8

VMScore: 384

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

An issue exists in urllib2 in Python 2.x up to and including 2.7.17 and urllib in Python 3.x up to and including 3.8.0. CRLF injection is possible if the attacker controls a url parameter, as demonstrated by the first argument to urllib.request.urlopen with \r\n (specifically in the host component of a URL) followed by an HTTP header. This is similar to the CVE-2019-9740 query string issue and the CVE-2019-9947 path string issue. (This is not exploitable when glibc has CVE-2016-10739 fixed.). This is fixed in: v2.7.18, v2.7.18rc1; v3.5.10, v3.5.10rc1; v3.6.11, v3.6.11rc1, v3.6.12; v3.7.8, v3.7.8rc1, v3.7.9; v3.8.3, v3.8.3rc1, v3.8.4, v3.8.4rc1, v3.8.5, v3.8.6, v3.8.6rc1.

Vulnerable Product	Search on Vulmon	Subscribe to Product
python python

Synopsis Moderate: rh-python36 security, bug fix, and enhancement update Type/Severity Security Advisory: Moderate Topic An update for rh-python36-python, rh-python36-python-pip, and rh-python36-python-virtualenv is now available for Red Hat Software CollectionsRed Hat Product Security has rated this updat ...

Synopsis Moderate: python27 security, bug fix, and enhancement update Type/Severity Security Advisory: Moderate Topic An update for python27-python, python27-python-pip, and python27-python-virtualenv is now available for Red Hat Software CollectionsRed Hat Product Security has rated this update as having ...

Several security issues were fixed in Python ...

In Lib/tarfilepy in Python through 383, an attacker is able to craft a TAR archive leading to an infinite loop when opened by tarfileopen, because _proc_pax lacks header validation (CVE-2019-20907) An issue was discovered in urllib2 in Python 2x through 2717 and urllib in Python 3x through 380 CRLF injection is possible if the attacker ...

httpcookiejarDefaultPolicydomain_return_ok in Lib/http/cookiejarpy in Python before 373 does not correctly validate the domain: it can be tricked into sending existing cookies to the wrong server An attacker may abuse this flaw by using a server with a hostname that has another valid hostname as a suffix (eg, pythonicexamplecom to steal c ...

In Lib/tarfilepy in Python through 383, an attacker is able to craft a TAR archive leading to an infinite loop when opened by tarfileopen, because _proc_pax lacks header validation (CVE-2019-20907) An issue was discovered in urllib2 in Python 2x through 2717 and urllib in Python 3x through 380 CRLF injection is possible if the attacker ...

Critical Infrastructure Sectors: Critical Manufacturing

CWE-74 https://bugs.python.org/issue30458#msg347282 https://bugzilla.redhat.com/show_bug.cgi?id=1727276 https://security.netapp.com/advisory/ntap-20191107-0004/https://usn.ubuntu.com/4333-1/https://usn.ubuntu.com/4333-2/http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00041.html https://lists.debian.org/debian-lts-announce/2020/07/msg00011.html https://www.oracle.com/security-alerts/cpuoct2020.html https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M34WOYCDKTDE5KLUACE2YIEH7D37KHRX/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JCPGLTTOBB3QEARDX4JOYURP6ELNNA2V/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4X3HW5JRZ7GCPSR7UHJOLD7AWLTQCDVR/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UESGYI5XDAHJBATEZN3MHNDUBDH47AS6/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A5NSAX4SC3V64PGZUPH7PRDLSON34Q5A/https://access.redhat.com/errata/RHSA-2020:4285 https://nvd.nist.gov https://usn.ubuntu.com/4333-2/https://www.cisa.gov/news-events/ics-advisories/icsa-23-348-10

CVE-2019-18348

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

ICS Advisories

References

Vulmon Search

About

Products

Connect