USN-5888-1
Dashboard / Vulnerabilities / USN-5888-1
USN-5888-1
Summary: python3.9 vulnerabilities
Details: It was discovered that Python incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to execute arbitrary code. (CVE-2015-20107) Hamza Avvan discovered that Python incorrectly handled certain inputs. If a user or an automated system were tricked into running a specially crafted input, a remote attacker could possibly use this issue to execute arbitrary code. (CVE-2021-28861) It was discovered that Python incorrectly handled certain inputs. If a user or an automated system were tricked into running a specially crafted input, a remote attacker could possibly use this issue to execute arbitrary code. (CVE-2022-37454, CVE-2022-42919) It was discovered that Python incorrectly handled certain inputs. If a user or an automated system were tricked into running a specially crafted input, a remote attacker could possibly use this issue to cause a denial of service. (CVE-2022-45061, CVE-2023-24329)
References: https://ubuntu.com/security/notices/USN-5888-1, https://ubuntu.com/security/CVE-2015-20107, https://ubuntu.com/security/CVE-2021-28861, https://ubuntu.com/security/CVE-2022-37454, https://ubuntu.com/security/CVE-2022-42919, https://ubuntu.com/security/CVE-2022-45061, https://ubuntu.com/security/CVE-2023-24329
Affected packages
Package
Name: python3.9
Purl: pkg:deb/ubuntu/[email protected]~20.04.1+esm1?arch=source&distro=esm-apps/focal
Affected ranges
Type: ECOSYSTEM
Events:
