Security Fix(es) :

  - python: XSS vulnerability in the documentation XML-RPC     server in server_title field (CVE-2019-16935)

  - python: wrong backtracking in     urllib.request.AbstractBasicAuthHandler allows for a     ReDoS (CVE-2020-8492)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:3888 advisory.

    Python is an interpreted, interactive, object-oriented programming language, which includes modules,     classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to     many system calls and libraries, as well as to various windowing systems.

    Security Fix(es):

    * python: XSS vulnerability in the documentation XML-RPC server in server_title field (CVE-2019-16935)

    * python: wrong backtracking in urllib.request.AbstractBasicAuthHandler allows for a ReDoS (CVE-2020-8492)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.9 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-3888 advisory.

  - The documentation XML-RPC server in Python through 2.7.16, 3.x through 3.6.9, and 3.7.x through 3.7.4 has     XSS via the server_title field. This occurs in Lib/DocXMLRPCServer.py in Python 2.x, and in     Lib/xmlrpc/server.py in Python 3.x. If set_server_title is called with untrusted input, arbitrary     JavaScript can be delivered to clients that visit the http URL for this server. (CVE-2019-16935)

  - Python 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8 through 3.8.1     allows an HTTP server to conduct Regular Expression Denial of Service (ReDoS) attacks against a client     because of urllib.request.AbstractBasicAuthHandler catastrophic backtracking. (CVE-2020-8492)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:3911 advisory.

  - python: XSS vulnerability in the documentation XML-RPC server in server_title field (CVE-2019-16935)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the python2 package has been released.

An update of the python3 package has been released.

This update for python3 to 3.6.9 fixes the following issues :

Security issues fixed :

  - CVE-2019-16056: Fixed a parser issue in the email     module. (bsc#1149955)

  - CVE-2019-16935: Fixed a reflected XSS in     python/Lib/DocXMLRPCServer.py (bsc#1153238).

Non-security issues fixed :

  - Fixed regression of OpenSSL 1.1.1b-1 in EVP_PBE_scrypt()     with salt=NULL. (bsc#1151490)

  - Improved locale handling by implementing PEP 538.

This update was imported from the SUSE:SLE-15:Update update project.

This update for python3 fixes the following issues :

  - Fixed CVE-2020-27619 (bsc#1178009), where     Lib/test/multibytecodec_support calls eval() on content     retrieved via HTTP.

  - Change setuptools and pip version numbers according to     new wheels

  - Handful of changes to make python36 compatible with     SLE15 and SLE12 (jsc#ECO-2799, jsc#SLE-13738)

  - add triplets for mips-r6 and riscv

  - RISC-V needs CTYPES_PASS_BY_REF_HACK

Update to 3.6.12 (bsc#1179193)

  - Ensure python3.dll is loaded from correct locations when     Python is embedded

  - The __hash__() methods of ipaddress.IPv4Interface and     ipaddress.IPv6Interface incorrectly generated constant     hash values of 32 and 128 respectively. This resulted in     always causing hash collisions. The fix uses hash() to     generate hash values for the tuple of (address, mask     length, network address).

  - Prevent http header injection by rejecting control     characters in http.client.putrequest(&hellip;).

  - Unpickling invalid NEWOBJ_EX opcode with the C     implementation raises now UnpicklingError instead of     crashing.

  - Avoid infinite loop when reading specially crafted TAR     files using the tarfile module

  - This release also fixes CVE-2020-26116 (bsc#1177211) and     CVE-2019-20907 (bsc#1174091).

Update to 3.6.11 :

  - Disallow CR or LF in email.headerregistry. Address     arguments to guard against header injection attacks.

  - Disallow control characters in hostnames in http.client,     addressing CVE-2019-18348. Such potentially malicious     header injection URLs now cause a InvalidURL to be     raised. (bsc#1155094)

  - CVE-2020-8492: The AbstractBasicAuthHandler class of the     urllib.request module uses an inefficient regular     expression which can be exploited by an attacker to     cause a denial of service. Fix the regex to prevent the     catastrophic backtracking. Vulnerability reported by Ben     Caller and Matt Schwager.

This update was imported from the SUSE:SLE-15:Update update project.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
141770	Scientific Linux Security Update : python3 on SL7.x x86_64 (20201001)	Nessus	Scientific Linux Local Security Checks	2020/10/21	2024/2/14	medium
141029	RHEL 7 : python3 (RHSA-2020:3888)	Nessus	Red Hat Local Security Checks	2020/9/29	2024/6/4	medium
141218	Oracle Linux 7 : python3 (ELSA-2020-3888)	Nessus	Oracle Linux Local Security Checks	2020/10/7	2024/2/16	medium
143286	CentOS 7 : python (CESA-2020:3911)	Nessus	CentOS Local Security Checks	2020/11/30	2024/2/8	medium
130114	Photon OS 2.0: Python2 PHSA-2019-2.0-0182	Nessus	PhotonOS Local Security Checks	2019/10/22	2024/4/17	medium
130115	Photon OS 2.0: Python3 PHSA-2019-2.0-0182	Nessus	PhotonOS Local Security Checks	2019/10/22	2024/4/17	medium
130579	openSUSE Security Update : python3 (openSUSE-2019-2438)	Nessus	SuSE Local Security Checks	2019/11/6	2024/4/15	high
145326	openSUSE Security Update : python3 (openSUSE-2020-2332)	Nessus	SuSE Local Security Checks	2021/1/25	2024/1/26	critical

検出

プラグインの検索

medium

medium

medium

medium

medium

medium

high

critical