Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 156

Export CSV
CVE-2023-6507

Groups not dropped before running subprocess when using empty 'extra_groups' parameter

An issue was found in CPython 3.12.0 `subprocess` module on POSIX platforms. The issue was fixed in CPython 3.12.1 and does not affect other stable releases. When using the `extra_groups=` parameter with an empty list as a value (ie `extra_groups=[]`) the logic regressed to not call `setgroups(0, NULL)` before calling `exec()`, thus not dropping the original processes' groups before starting the new process. There is no issue when the parameter isn't used or when any value is used besides an empty list. This issue only impacts CPython processes run with sufficient privilege to make the `setgroups` system call (typically `root`).

CVSS 3.1 · 6.1 Medium EPSS 1.3% KEV · Not listed
Vendors
Python
Products
Cpython Python
CVE-2025-13462

tarfile: Skip DIRTYPE normalization during GNU LONGNAME/LONGLINK handling

The "tarfile" module would still apply normalization of AREGTYPE (\x00) blocks to DIRTYPE, even while processing a multi-block member such as GNUTYPE_LONGNAME or GNUTYPE_LONGLINK. This could result in a crafted tar archive being misinterpreted by the tarfile module compared to other implementations.

CVSS 4.0 · 2 Low EPSS < 1% KEV · Not listed
Vendors
Python
Products
Cpython Python
CVE-2016-2183

SSL/TLS: Birthday attack against 64-bit block ciphers (SWEET32)

The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted session, as demonstrated by an HTTPS session using Triple DES in CBC mode, aka a "Sweet32" attack.

CVSS 3.1 · 7.5 High EPSS 94.7% KEV · Not listed
Vendors
Cisco Nodejs Openssl and 3 more
Products
Content Security Management Appliance Node.js Openssl and 11 more
CVE-2023-27043

python: Parsing errors in email/_parseaddr.py lead to incorrect value in email address part of tuple

The email module of Python through 3.11.3 incorrectly parses e-mail addresses that contain a special character. The wrong portion of an RFC2822 header is identified as the value of the addr-spec. In some applications, an attacker can bypass a protection mechanism in which application access is granted only after verifying receipt of e-mail to a specific domain (e.g., only @company.example.com addresses may be used for signup). This occurs in email/_parseaddr.py in recent versions of Python.

CVSS 3.1 · 5.3 Medium EPSS 2.5% KEV · Not listed
Vendors
Fedoraproject Netapp Python and 1 more
Products
Fedora Active Iq Unified Manager Ontap Select Deploy Administration Utility and 4 more
CVE-2009-2940

PyGreSQL: Missing a function to call PQescapeStringConn()

The pygresql module 3.8.1 and 4.0 for Python does not properly support the PQescapeStringConn function, which might allow remote attackers to leverage escaping issues involving multibyte character encodings.

CVSS 3.0 · 5.4 Medium EPSS 2.7% KEV · Not listed
Vendors
Pygresql Python
Products
Pygresql Python
CVE-2008-3144

python: Potential integer underflow and overflow in the PyOS_vsnprintf C API function

Multiple integer overflows in the PyOS_vsnprintf function in Python/mysnprintf.c in Python 2.5.2 and earlier allow context-dependent attackers to cause a denial of service (memory corruption) or have unspecified other impact via crafted input to string formatting operations. NOTE: the handling of certain integer values is also affected by related integer underflows and an off-by-one error.

CVSS 2.0 · 5.0 Medium EPSS 4.2% KEV · Not listed
Vendors
Python Redhat
Products
Python Enterprise Linux
CVE-2008-4864

python: imageop module multiple integer overflows

Multiple integer overflows in imageop.c in the imageop module in Python 1.5.2 through 2.5.1 allow context-dependent attackers to break out of the Python VM and execute arbitrary code via large integer values in certain arguments to the crop function, leading to a buffer overflow, a different vulnerability than CVE-2007-4965 and CVE-2008-1679.

CVSS 2.0 · 7.5 High EPSS 21.0% KEV · Not listed
Vendors
Python Redhat
Products
Python Enterprise Linux
CVE-2008-5031

python: stringobject, unicodeobject integer overflows

Multiple integer overflows in Python 2.2.3 through 2.5.1, and 2.6, allow context-dependent attackers to have an unknown impact via a large integer value in the tabsize argument to the expandtabs method, as implemented by (1) the string_expandtabs function in Objects/stringobject.c and (2) the unicode_expandtabs function in Objects/unicodeobject.c. NOTE: this vulnerability reportedly exists because of an incomplete fix for CVE-2008-2315.

CVSS 2.0 · 10.0 Critical EPSS 3.0% KEV · Not listed
Vendors
Python Redhat
Products
Python Enterprise Linux
CVE-2008-5983

python: untrusted python modules search path

Untrusted search path vulnerability in the PySys_SetArgv API function in Python 2.6 and earlier, and possibly later versions, prepends an empty string to sys.path when the argv[0] argument does not contain a path separator, which might allow local users to execute arbitrary code via a Trojan horse Python file in the current working directory.

CVSS 2.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Fedoraproject Python and 1 more
Products
Ubuntu Linux Fedora Python and 1 more
CVE-2009-3720

expat: buffer over-read and crash on XML with malformed UTF-8 sequences

The updatePosition function in lib/xmltok_impl.c in libexpat in Expat 2.0.1, as used in Python, PyXML, w3c-libwww, and other software, allows context-dependent attackers to cause a denial of service (application crash) via an XML document with crafted UTF-8 sequences that trigger a buffer over-read, a different vulnerability than CVE-2009-2625.

CVSS 2.0 · 5.0 Medium EPSS 27.9% KEV · Not listed
Vendors
Apache Libexpat Project Python and 1 more
Products
Http Server Libexpat Python and 4 more
CVE-2006-4980

python repr unicode buffer overflow

Buffer overflow in the repr function in Python 2.3 through 2.6 before 20060822 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via crafted wide character UTF-32/UCS-4 strings to certain scripts.

CVSS 2.0 · 7.5 High EPSS 5.6% KEV · Not listed
Vendors
Python Redhat
Products
Python Enterprise Linux Network Satellite
CVE-2007-2052

python off-by-one locale.strxfrm() (possible memory disclosure)

Off-by-one error in the PyLocale_strxfrm function in Modules/_localemodule.c for Python 2.4 and 2.5 causes an incorrect buffer size to be used for the strxfrm function, which allows context-dependent attackers to read portions of memory via unknown manipulations that trigger a buffer over-read due to missing null termination.

CVSS 2.0 · 5.0 Medium EPSS 14.1% KEV · Not listed
Vendors
Python Redhat
Products
Python Enterprise Linux Network Satellite
CVE-2007-4559

python: tarfile module directory traversal

Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive, a related issue to CVE-2001-1267.

CVSS 3.1 · 9.8 Critical EPSS 27.1% KEV · Not listed
Vendors
Python Redhat
Products
Python Enterprise Linux Rhel Eus and 1 more
CVE-2007-4965

python imageop module heap corruption

Multiple integer overflows in the imageop module in Python 2.5.1 and earlier allow context-dependent attackers to cause a denial of service (application crash) and possibly obtain sensitive information (memory contents) via crafted arguments to (1) the tovideo method, and unspecified other vectors related to (2) imageop.c, (3) rbgimgmodule.c, and other files, which trigger heap-based buffer overflows.

CVSS 2.0 · 5.8 Medium EPSS 14.0% KEV · Not listed
Vendors
Python Redhat
Products
Python Enterprise Linux Network Satellite
CVE-2008-1679

python: imageop module integer overflows

Multiple integer overflows in imageop.c in Python before 2.5.3 allow context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted images that trigger heap-based buffer overflows. NOTE: this issue is due to an incomplete fix for CVE-2007-4965.

CVSS 2.0 · 6.8 Medium EPSS 4.1% KEV · Not listed
Vendors
Python Redhat
Products
Python Enterprise Linux
CVE-2008-1721

python: integer signedness error in the zlib extension module

Integer signedness error in the zlib extension module in Python 2.5.2 and earlier allows remote attackers to execute arbitrary code via a negative signed integer, which triggers insufficient memory allocation and a buffer overflow.

CVSS 2.0 · 7.5 High EPSS 22.6% KEV · Not listed
Vendors
Canonical Debian Python and 1 more
Products
Ubuntu Linux Debian Linux Python and 1 more
CVE-2008-1887

python: PyString_FromStringAndSize does not check for negative size values

Python 2.5.2 and earlier allows context-dependent attackers to execute arbitrary code via multiple vectors that cause a negative size value to be provided to the PyString_FromStringAndSize function, which allocates less memory than expected when assert() is disabled and triggers a buffer overflow.

CVSS 2.0 · 9.3 Critical EPSS 6.3% KEV · Not listed
Vendors
Canonical Debian Python and 1 more
Products
Ubuntu Linux Debian Linux Python and 1 more
CVE-2008-2315

python: Multiple integer overflows in python core

Multiple integer overflows in Python 2.5.2 and earlier allow context-dependent attackers to have an unknown impact via vectors related to the (1) stringobject, (2) unicodeobject, (3) bufferobject, (4) longobject, (5) tupleobject, (6) stropmodule, (7) gcmodule, and (8) mmapmodule modules. NOTE: The expandtabs integer overflows in stringobject and unicodeobject in 2.5.2 are covered by CVE-2008-5031.

CVSS 2.0 · 7.5 High EPSS 4.4% KEV · Not listed
Vendors
Python Redhat
Products
Python Enterprise Linux
CVE-2008-2316

python: integer overflow in hashlib module

Integer overflow in _hashopenssl.c in the hashlib module in Python 2.5.2 and earlier might allow context-dependent attackers to defeat cryptographic digests, related to "partial hashlib hashing of data exceeding 4GB."

CVSS 2.0 · 7.5 High EPSS 4.1% KEV · Not listed
Vendors
Python
Products
Python
CVE-2008-3142

python: Multiple buffer overflows in unicode processing

Multiple buffer overflows in Python 2.5.2 and earlier on 32bit platforms allow context-dependent attackers to cause a denial of service (crash) or have unspecified other impact via a long string that leads to incorrect memory allocation during Unicode string processing, related to the unicode_resize function and the PyMem_RESIZE macro.

CVSS 2.0 · 7.5 High EPSS 4.5% KEV · Not listed
Vendors
Canonical Debian Python and 1 more
Products
Ubuntu Linux Debian Linux Python and 1 more