USN-5888-1: Python vulnerabilities
It was discovered that Python incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to execute arbitrary code. (CVE-2015-20107) Hamza Avvan discovered that Python incorrectly handled certain inputs. If a user or an automated system were tricked into running a specially crafted input, a remote attacker could possibly use this issue to execute arbitrary code. (CVE-2021-28861) It was discovered that Python incorrectly handled certain inputs. If a user or an automated system were tricked into running a specially crafted input, a remote attacker could possibly use this issue to execute arbitrary code. (CVE-2022-37454, CVE-2022-42919) It was discovered that Python incorrectly handled certain inputs. If a user or an automated system were tricked into running a specially crafted input, a remote attacker could possibly use this issue to cause a denial of service. (CVE-2022-45061, CVE-2023-24329)
Affected Software
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
What is the vulnerability ID for Python vulnerabilities?
The vulnerability ID for Python vulnerabilities is USN-5888-1.
What is the severity of USN-5888-1?
The severity of USN-5888-1 is not mentioned in the provided information.
How can a remote attacker exploit USN-5888-1?
A remote attacker could exploit USN-5888-1 by tricking a user or an automated system into opening a specially crafted input file, potentially allowing the execution of arbitrary code.
Which versions of Python are affected by USN-5888-1?
Python versions 3.9.5-3ubuntu0~20.04.1+esm1 and earlier are affected by USN-5888-1.
How can I fix USN-5888-1?
To fix USN-5888-1, update the affected Python packages to version 3.9.5-3ubuntu0~20.04.1+esm1 or later.