USN-5960-1: Python vulnerability
Yebo Cao discovered that Python incorrectly handled certain URLs. An attacker could possibly use this issue to bypass blocklisting methods by supplying a URL that starts with blank characters.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this Python vulnerability?
The vulnerability ID for this Python vulnerability is USN-5960-1.
What is the description of the Python vulnerability?
The Python vulnerability allows attackers to bypass blocklisting methods by supplying a URL that starts with blank characters.
Which versions of Python are affected by this vulnerability?
The following versions of Python are affected: Python 3.10.7-1ubuntu0.3, Python 3.10.6-1~22.04.2ubuntu1, Python 3.8.10-0ubuntu1~20.04.7, Python 2.7.17-1~18.04ubuntu1.11, Python 3.6.9-1~18.04ubuntu1.12, Python 2.7.12-1ubuntu0~16.04.18+esm4, Python 3.5.2-2ubuntu0~16.04.13+esm7, Python 2.7.6-8ubuntu0.6+esm14.
How can an attacker exploit this Python vulnerability?
An attacker can exploit this vulnerability by supplying a URL that starts with blank characters.
Where can I find more information about fixing this Python vulnerability?
You can find more information about fixing this vulnerability at the following references: [CVE-2023-24329](https://ubuntu.com/security/CVE-2023-24329), [USN-5888-1](https://ubuntu.com/security/notices/USN-5888-1), [USN-6139-1](https://ubuntu.com/security/notices/USN-6139-1).