Python vulnerabilities

2023-11-2300:00:00

ubuntu.com

python

ubuntu

vulnerabilities

tls handshake

plist file

denial of service

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

7.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.1%

JSON

Releases

Ubuntu 18.04 ESM
Ubuntu 16.04 ESM
Ubuntu 14.04 ESM

Packages

python2.7 - An interactive high-level object-oriented language
python3.5 - An interactive high-level object-oriented language
python3.6 - An interactive high-level object-oriented language

Details

It was discovered that Python incorrectly handled certain plist files.
If a user or an automated system were tricked into processing a specially
crafted plist file, an attacker could possibly use this issue to consume
resources, resulting in a denial of service. (CVE-2022-48564)

It was discovered that Python instances of ssl.SSLSocket were vulnerable
to a bypass of the TLS handshake. An attacker could possibly use this
issue to cause applications to treat unauthenticated received data before
TLS handshake as authenticated data after TLS handshake. (CVE-2023-40217)

OSVersionArchitecturePackageVersionFilename
Ubuntu18.04noarchpython2.7< 2.7.17-1~18.04ubuntu1.13+esm4UNKNOWN
Ubuntu18.04noarchidle-python2.7< 2.7.17-1~18.04ubuntu1.11UNKNOWN
Ubuntu18.04noarchlibpython2.7< 2.7.17-1~18.04ubuntu1.11UNKNOWN
Ubuntu18.04noarchlibpython2.7-dbg< 2.7.17-1~18.04ubuntu1.11UNKNOWN
Ubuntu18.04noarchlibpython2.7-dev< 2.7.17-1~18.04ubuntu1.11UNKNOWN
Ubuntu18.04noarchlibpython2.7-minimal< 2.7.17-1~18.04ubuntu1.11UNKNOWN
Ubuntu18.04noarchlibpython2.7-stdlib< 2.7.17-1~18.04ubuntu1.11UNKNOWN
Ubuntu18.04noarchlibpython2.7-testsuite< 2.7.17-1~18.04ubuntu1.11UNKNOWN
Ubuntu18.04noarchpython2.7< 2.7.17-1~18.04ubuntu1.11UNKNOWN
Ubuntu18.04noarchpython2.7-dbg< 2.7.17-1~18.04ubuntu1.11UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	18.04	noarch	python2.7	< 2.7.17-1~18.04ubuntu1.13+esm4	UNKNOWN
Ubuntu	18.04	noarch	idle-python2.7	< 2.7.17-1~18.04ubuntu1.11	UNKNOWN
Ubuntu	18.04	noarch	libpython2.7	< 2.7.17-1~18.04ubuntu1.11	UNKNOWN
Ubuntu	18.04	noarch	libpython2.7-dbg	< 2.7.17-1~18.04ubuntu1.11	UNKNOWN
Ubuntu	18.04	noarch	libpython2.7-dev	< 2.7.17-1~18.04ubuntu1.11	UNKNOWN
Ubuntu	18.04	noarch	libpython2.7-minimal	< 2.7.17-1~18.04ubuntu1.11	UNKNOWN
Ubuntu	18.04	noarch	libpython2.7-stdlib	< 2.7.17-1~18.04ubuntu1.11	UNKNOWN
Ubuntu	18.04	noarch	libpython2.7-testsuite	< 2.7.17-1~18.04ubuntu1.11	UNKNOWN
Ubuntu	18.04	noarch	python2.7	< 2.7.17-1~18.04ubuntu1.11	UNKNOWN
Ubuntu	18.04	noarch	python2.7-dbg	< 2.7.17-1~18.04ubuntu1.11	UNKNOWN