USN-4333-1: Python vulnerabilities
It was discovered that Python incorrectly stripped certain characters from requests. A remote attacker could use this issue to perform CRLF injection. (CVE-2019-18348) It was discovered that Python incorrectly handled certain HTTP requests. An attacker could possibly use this issue to cause a denial of service. (CVE-2020-8492)
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for the Python vulnerabilities?
The vulnerability ID for the Python vulnerabilities is CVE-2019-18348.
What is the impact of the Python vulnerabilities?
The Python vulnerabilities could allow a remote attacker to perform CRLF injection and cause a denial of service.
Which versions of Python are affected by the vulnerabilities?
The vulnerabilities affect Python versions 2.7, 3.4, 3.5, 3.6, and 3.7.
How can I fix the Python vulnerabilities?
To fix the Python vulnerabilities, update your Python packages to the specified remedial versions.
Where can I find more information about the Python vulnerabilities?
You can find more information about the Python vulnerabilities in the provided references.