UBUNTU-CVE-2026-103995: Low severity ubuntu/python2.7 vulnerability
Response body and chunk parsing would handle non-hex or negative integers incorrectly which could result in misinterpreting HTTP response contents.
Affected Software
Event History
Frequently Asked Questions
Which Ubuntu packages are identified as affected?
The affected software list includes Ubuntu packages for Python 2.7 and Python 3.4 through 3.9, as well as Python 3.14.
What would an attacker need to exploit this issue?
The vector indicates network reachability, low attack complexity, required high privileges, and required user interaction. The issue involves HTTP response bodies or chunked response parsing that contain non-hex or negative integer values.
What security impact is indicated?
The supplied vector indicates no direct impact to vulnerable-system confidentiality, integrity, or availability. It indicates low impact to integrity and availability in a subsequent system context, caused by misinterpreting HTTP response contents.