Published: 22/10/2020 Updated: 03/02/2024

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9

VMScore: 668

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

In Python 3 up to and including 3.9.0, the Lib/test/multibytecodec_support.py CJK codec tests call eval() on content retrieved via HTTP.

Vulnerable Product	Search on Vulmon	Subscribe to Product
python python
fedoraproject fedora 33
fedoraproject fedora 34
oracle communications cloud native core network function cloud native environment 22.2.0

Python could be made to execute arbitrary code or denial of service if it received a specially crafted input ...

In Python3's Lib/test/multibytecodec_supportpy CJK codec tests call eval() on content retrieved via HTTP (CVE-2020-27619) The package python/cpython is vulnerable to Web Cache Poisoning via urllibparseparse_qsl and urllibparseparse_qs by using a vector called parameter cloaking When the attacker can separate query parameters using a semicolo ...

The CryptProtectMemory function in cngsys (aka the Cryptography Next Generation driver) in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 81, Windows Server 2012 Gold and R2, and Windows RT Gold and 81, when the CRYPTPROTECTMEMORY_SAME_LOGON o ...

A flaw was found in Python The built-in modules httplib and httpclient (included in Python 2 and Python 3, respectively) do not properly validate CRLF sequences in the HTTP request method, potentially allowing manipulation to the request by injecting additional HTTP headers The highest threat from this vulnerability is to confidentiality and int ...

In Python 3 through 390, the Lib/test/multibytecodec_supportpy CJK codec tests call eval() on content retrieved via HTTP ...

NVD-CWE-noinfo https://github.com/python/cpython/commit/2ef5caa58febc8968e670e39e3d37cf8eef3cab8 https://github.com/python/cpython/commit/43e523103886af66d6c27cd72431b5d9d14cd2a9 https://github.com/python/cpython/commit/6c6c256df3636ff6f6136820afaefa5a10a3ac33 https://github.com/python/cpython/commit/e912e945f2960029d039d3390ea08835ad39374b https://bugs.python.org/issue41944 https://github.com/python/cpython/commit/b664a1df4ee71d3760ab937653b10997081b1794 https://security.netapp.com/advisory/ntap-20201123-0004/https://www.oracle.com/security-alerts/cpujul2022.html https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SGIY6I4YS3WOXAK4SXKIEOC2G4VZKIR7/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RSLQD5CCM75IZGAMBDGUZEATYU5YSGJ7/https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E https://security.gentoo.org/glsa/202402-04 https://ubuntu.com/security/notices/USN-4754-5 https://nvd.nist.gov

CVE-2020-27619

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect