Multiple vulnerabilities were found in the CPython interpreter which can cause denial of service, information gain, and arbitrary code execution.

CVE-2017-1000158

CPython (aka Python) is vulnerable to an integer overflow in the PyString_DecodeEscape function in stringobject.c, resulting in heap-based buffer overflow (and possible arbitrary code execution)

CVE-2018-1060

python is vulnerable to catastrophic backtracking in pop3lib's apop() method. An attacker could use this flaw to cause denial of service.

CVE-2018-1061

python is vulnerable to catastrophic backtracking in the difflib.IS_LINE_JUNK method. An attacker could use this flaw to cause denial of service.

CVE-2018-1000802

Python Software Foundation Python (CPython) version 2.7 contains a CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in shutil module (make_archive function) that can result in Denial of service, Information gain via injection of arbitrary files on the system or entire drive. This attack appear to be exploitable via Passage of unfiltered user input to the function.

For Debian 8 'Jessie', these problems have been fixed in version 2.7.9-2+deb8u2.

We recommend that you upgrade your python2.7 packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3817-1 advisory.

    It was discovered that Python incorrectly handled large amounts of data. A remote attacker could use this     issue to cause Python to crash, resulting in a denial of service, or possibly execute arbitrary code. This     issue only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. (CVE-2018-1000030)

    It was discovered that Python incorrectly handled running external commands in the shutil module. A remote     attacker could use this issue to cause Python to crash, resulting in a denial of service, or possibly     execute arbitrary code. (CVE-2018-1000802)

    It was discovered that Python incorrectly used regular expressions vulnerable to catastrophic     backtracking. A remote attacker could possibly use this issue to cause a denial of service. This issue     only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. (CVE-2018-1060, CVE-2018-1061)

    It was discovered that Python failed to initialize Expat's hash salt. A remote attacker could possibly use     this issue to cause hash collisions, leading to a denial of service. (CVE-2018-14647)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the python packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - The Wave_read._read_fmt_chunk function in Lib/wave.py     in Python through 3.6.4 does not ensure a nonzero     channel value, which allows attackers to cause a denial     of service (divide-by-zero and exception) via a crafted     wav format audio file. NOTE: the vendor disputes this     issue because Python applications 'need to be prepared     to handle a wide variety of     exceptions.'(CVE-2017-18207)

  - Python Software Foundation Python (CPython) version 2.7     contains a CWE-77: Improper Neutralization of Special     Elements used in a Command ('Command Injection')     vulnerability in shutil module (make_archive function)     that can result in Denial of service, Information gain     via injection of arbitrary files on the system or     entire drive. This attack appear to be exploitable via     Passage of unfiltered user input to the function. This     vulnerability appears to have been fixed in after     commit     add531a1e55b0a739b0f42582f1c9747e5649ace.(CVE-2018-1000     802)

  - Python 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6     through 3.6.10, 3.7 through 3.7.6, and 3.8 through     3.8.1 allows an HTTP server to conduct Regular     Expression Denial of Service (ReDoS) attacks against a     client because of     urllib.request.AbstractBasicAuthHandler catastrophic     backtracking.(CVE-2020-8492)

  - Lib/zipfile.py in Python through 3.7.2 allows remote     attackers to cause a denial of service (resource     consumption) via a ZIP bomb.(CVE-2019-9674)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security fix for CVE-2018-1000802

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Multiple security issues were discovered in Python: ElementTree failed to initialise Expat's hash salt, two denial of service issues were found in difflib and poplib and the shutil module was affected by a command injection vulnerability.

This update for python, python-base fixes the following issues :

Security issues fixed :

  - CVE-2018-1000802: Prevent command injection in shutil     module (make_archive function) via passage of unfiltered     user input (bsc#1109663).

  - CVE-2018-1061: Fixed DoS via regular expression     backtracking in difflib.IS_LINE_JUNK method in difflib     (bsc#1088004).

  - CVE-2018-1060: Fixed DoS via regular expression     catastrophic backtracking in apop() method in pop3lib     (bsc#1088009).

Bug fixes :

  - bsc#1086001: python tarfile uses random order.

This update was imported from the SUSE:SLE-12-SP1:Update update project.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
117712	Debian DLA-1519-1 : python2.7 security update	Nessus	Debian Local Security Checks	2018/9/27	2024/8/5	critical
118954	Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : Python vulnerabilities (USN-3817-1)	Nessus	Ubuntu Local Security Checks	2018/11/14	2025/9/3	critical
135556	EulerOS 2.0 SP3 : python (EulerOS-SA-2020-1427)	Nessus	Huawei Local Security Checks	2020/4/15	2024/3/18	critical
120340	Fedora 28 : python2 (2018-33c7c17e71)	Nessus	Fedora Local Security Checks	2019/1/3	2024/7/8	critical
120704	Fedora 29 : python2 (2018-ae70d262b0)	Nessus	Fedora Local Security Checks	2019/1/3	2024/7/1	critical
117812	Debian DSA-4306-1 : python2.7 - security update	Nessus	Debian Local Security Checks	2018/9/28	2024/8/1	critical
118869	openSUSE Security Update : python / python-base (openSUSE-2018-1363)	Nessus	SuSE Local Security Checks	2018/11/11	2024/7/24	critical

検出

プラグインの検索

critical

critical

critical

critical

critical

critical

critical