CVE-2018-1000117: Buffer Overflow
Python Software Foundation CPython version From 3.2 until 3.6.4 on Windows contains a Buffer Overflow vulnerability in os.symlink() function on Windows that can result in Arbitrary code execution, likely escalation of privilege. This attack appears to be exploitable via a python script that creates a symlink with an attacker controlled name or location. This vulnerability appears to have been fixed in 3.7.0 and 3.6.5.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2018-1000117?
CVE-2018-1000117 has a high severity due to its potential for arbitrary code execution.
How do I fix CVE-2018-1000117?
To fix CVE-2018-1000117, upgrade to Python versions 3.6.5 or later, or 3.7.0-beta6 or later.
Which versions of Python are affected by CVE-2018-1000117?
CVE-2018-1000117 affects Python versions from 3.2 through 3.6.4, along with specific beta versions of 3.7.0.
Can CVE-2018-1000117 be exploited easily?
Yes, CVE-2018-1000117 can be exploited via a Python script that uses the os.symlink() function on Windows.
What are the potential impacts of CVE-2018-1000117?
The potential impacts of CVE-2018-1000117 include arbitrary code execution and possible escalation of privileges on affected systems.