Python 2.7 vulnerabilities

2013-10-0100:00:00

ubuntu.com

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

7.5 High

AI Score

Confidence

High

0.053 Low

EPSS

Percentile

93.1%

JSON

Releases

Ubuntu 13.04
Ubuntu 12.10
Ubuntu 12.04

Packages

python2.7 - An interactive high-level object-oriented language

Details

Florian Weimer discovered that Python incorrectly handled matching multiple
wildcards in ssl certificate hostnames. An attacker could exploit this to
cause Python to consume resources, resulting in a denial of service. This
issue only affected Ubuntu 13.04. (CVE-2013-2099)

Ryan Sleevi discovered that Python did not properly handle certificates
with NULL characters in the Subject Alternative Name field. An attacker
could exploit this to perform a machine-in-the-middle attack to view sensitive
information or alter encrypted communications. (CVE-2013-4238)

OSVersionArchitecturePackageVersionFilename
Ubuntu13.04noarchpython2.7< 2.7.4-2ubuntu3.2UNKNOWN
Ubuntu13.04noarchlibpython2.7< 2.7.4-2ubuntu3.2UNKNOWN
Ubuntu13.04noarchlibpython2.7-dbg< 2.7.4-2ubuntu3.2UNKNOWN
Ubuntu13.04noarchlibpython2.7-dev< 2.7.4-2ubuntu3.2UNKNOWN
Ubuntu13.04noarchlibpython2.7-minimal< 2.7.4-2ubuntu3.2UNKNOWN
Ubuntu13.04noarchlibpython2.7-stdlib< 2.7.4-2ubuntu3.2UNKNOWN
Ubuntu13.04noarchpython2.7-dbg< 2.7.4-2ubuntu3.2UNKNOWN
Ubuntu13.04noarchpython2.7-dev< 2.7.4-2ubuntu3.2UNKNOWN
Ubuntu13.04noarchpython2.7-minimal< 2.7.4-2ubuntu3.2UNKNOWN
Ubuntu12.10noarchpython2.7< 2.7.3-5ubuntu4.3UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	13.04	noarch	python2.7	< 2.7.4-2ubuntu3.2	UNKNOWN
Ubuntu	13.04	noarch	libpython2.7	< 2.7.4-2ubuntu3.2	UNKNOWN
Ubuntu	13.04	noarch	libpython2.7-dbg	< 2.7.4-2ubuntu3.2	UNKNOWN
Ubuntu	13.04	noarch	libpython2.7-dev	< 2.7.4-2ubuntu3.2	UNKNOWN
Ubuntu	13.04	noarch	libpython2.7-minimal	< 2.7.4-2ubuntu3.2	UNKNOWN
Ubuntu	13.04	noarch	libpython2.7-stdlib	< 2.7.4-2ubuntu3.2	UNKNOWN
Ubuntu	13.04	noarch	python2.7-dbg	< 2.7.4-2ubuntu3.2	UNKNOWN
Ubuntu	13.04	noarch	python2.7-dev	< 2.7.4-2ubuntu3.2	UNKNOWN
Ubuntu	13.04	noarch	python2.7-minimal	< 2.7.4-2ubuntu3.2	UNKNOWN
Ubuntu	12.10	noarch	python2.7	< 2.7.3-5ubuntu4.3	UNKNOWN