CNNVD-ID编号 | CNNVD-201907-730 | CVE编号 | CVE-2018-20852 |
发布时间 | 2019-07-13 | 更新时间 | 2020-10-29 |
漏洞类型 | 输入验证错误 | 漏洞来源 | Ubuntu,Red Hat,Gentoo |
危险等级 | 中危 | 威胁类型 | 远程 |
厂商 | N/A |
Python是Python软件基金会的一套开源的、面向对象的程序设计语言。该语言具有可扩展、支持模块和包、支持多种平台等特点。
Python 3.7.3之前版本中的Lib/http/cookiejar.py文件存在安全漏洞。攻击者可利用该漏洞获取cookies。
目前厂商已发布升级了Python 输入验证错误漏洞的补丁,Python 输入验证错误漏洞的补丁获取链接:
https://bugs.python.org/issue35121
来源:GENTOO
来源:SUSE
链接:http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00074.html
来源:N/A
来源:REDHAT
来源:MLIST
链接:https://lists.debian.org/debian-lts-announce/2019/08/msg00040.html
来源:FEDORA
来源:FEDORA
来源:MLIST
链接:https://lists.debian.org/debian-lts-announce/2019/08/msg00022.html
来源:MLIST
链接:https://lists.debian.org/debian-lts-announce/2020/08/msg00034.html
来源:REDHAT
来源:FEDORA
来源:UBUNTU
来源:MISC
链接:https://python-security.readthedocs.io/vuln/cookie-domain-check.html
来源:UBUNTU
来源:MLIST
链接:https://lists.debian.org/debian-lts-announce/2020/07/msg00011.html
来源:bugs.python.org
来源:SUSE
链接:http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00071.html
来源:SUSE
链接:http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html
来源:www.suse.com
链接:https://www.suse.com/support/update/announcement/2020/suse-su-20200302-1.html
来源:www.suse.com
链接:https://www.suse.com/support/update/announcement/2019/suse-su-201914246-1.html
来源:www.suse.com
链接:https://www.suse.com/support/update/announcement/2019/suse-su-20192050-1.html
来源:www.suse.com
链接:https://www.suse.com/support/update/announcement/2019/suse-su-20192053-1.html
来源:security-tracker.debian.org
来源:www.suse.com
链接:https://www.suse.com/support/update/announcement/2019/suse-su-201914142-1.html
来源:www.suse.com
链接:https://www.suse.com/support/update/announcement/2019/suse-su-20192091-1.html
来源:usn.ubuntu.com
来源:access.redhat.com
来源:lists.debian.org
链接:https://lists.debian.org/debian-lts-announce/2019/08/msg00022.html
来源:www.suse.com
链接:https://www.suse.com/support/update/announcement/2019/suse-su-20192114-1.html
来源:www.auscert.org.au
来源:packetstormsecurity.com
链接:https://packetstormsecurity.com/files/156748/Gentoo-Linux-Security-Advisory-202003-26.html
来源:www.auscert.org.au
来源:www.auscert.org.au
来源:www.auscert.org.au
来源:www.ibm.com
来源:www.auscert.org.au
来源:packetstormsecurity.com
链接:https://packetstormsecurity.com/files/158637/Red-Hat-Security-Advisory-2020-3194-01.html
来源:packetstormsecurity.com
链接:https://packetstormsecurity.com/files/155446/Red-Hat-Security-Advisory-2019-3948-01.html
来源:www.auscert.org.au
来源:www.auscert.org.au
来源:packetstormsecurity.com
链接:https://packetstormsecurity.com/files/154399/Ubuntu-Security-Notice-USN-4127-1.html
来源:www.auscert.org.au
来源:www.auscert.org.au
来源:nvd.nist.gov
来源:packetstormsecurity.com
链接:https://packetstormsecurity.com/files/157446/Red-Hat-Security-Advisory-2020-1605-01.html
来源:www.auscert.org.au
来源:www.auscert.org.au
来源:www.auscert.org.au
来源:www.auscert.org.au
来源:www.auscert.org.au
暂无