NLTK Downloader before 3.4.5 is vulnerable to a directory traversal, allowing attackers to write arbitrary files via a ../ (dot dot slash) in an NLTK package (ZIP archive) that is mishandled during extraction.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - NLTK Downloader before 3.4.5 is vulnerable to a directory traversal, allowing attackers to write arbitrary
    files via a ../ (dot dot slash) in an NLTK package (ZIP archive) that is mishandled during extraction.
    (CVE-2019-14751)

This update for python-nltk fixes the following issues :

Update to 3.4.5 (boo#1146427, CVE-2019-14751) :

  - CVE-2019-14751: Fixed Zip slip vulnerability in     downloader for the unlikely situation where a user     configures their downloader to use a compromised server     (boo#1146427)

Update to 3.4.4 :

  - fix bug in plot function (probability.py)

  - add improved PanLex Swadesh corpus reader

  - add Text.generate()

  - add QuadgramAssocMeasures

  - add SSP to tokenizers

  - return confidence of best tag from AveragedPerceptron

  - make plot methods return Axes objects

  - don't require list arguments to     PositiveNaiveBayesClassifier.train

  - fix Tree classes to work with native Python copy library

  - fix inconsistency for NomBank

  - fix random seeding in LanguageModel.generate

  - fix ConditionalFreqDist mutation on tabulate/plot call

  - fix broken links in documentation

  - fix misc Wordnet issues

  - update installation instructions

Version update to 3.4.1 :

  - add chomsky_normal_form for CFGs

  - add meteor score

  - add minimum edit/Levenshtein distance based alignment     function

  - allow access to collocation list via     text.collocation_list()

  - support corenlp server options

  - drop support for Python 3.4

  - other minor fixes

Update to v3.4 :

  - Support Python 3.7

  - New Language Modeling package

  - Cistem Stemmer for German

  - Support Russian National Corpus incl POS tag model

  - Krippendorf Alpha inter-rater reliability test

  - Comprehensive code clean-ups

  - Switch continuous integration from Jenkins to Travis

Updated to v3.3 :

  - Support Python 3.6

  - New interface to CoreNLP

  - Support synset retrieval by sense key

  - Minor fixes to CoNLL Corpus Reader

  - AlignedSent

  - Fixed minor inconsistencies in APIs and API     documentation

  - Better conformance to PEP8

  - Drop Moses Tokenizer (incompatible license)

Update to latest stable release to fix CVE-2019-14751.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4106-1 advisory.

    Mike Salvatore discovered that NLTK mishandled crafted ZIP archives during extraction. A remote attacker     could use this vulnerability to write arbitrary files to the filesystem

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
422669	SCA: security update for nltk (GHSA-mr7p-25v2-35wr)	Tenable Cloud Security	SCA Checks	Local	high
422669	SCA: security update for nltk (GHSA-mr7p-25v2-35wr)	Tenable Self-Hosted Container Security	SCA Checks	Local	high
135162	openSUSE Security Update : python-nltk (openSUSE-2020-436)	Nessus	SuSE Local Security Checks	Local	high
134985	Fedora 31 : 1:python-nltk (2020-0f785235bb)	Nessus	Fedora Local Security Checks	Local	high
128049	Ubuntu 16.04 LTS / 18.04 LTS : NLTK vulnerability (USN-4106-1)	Nessus	Ubuntu Local Security Checks	Local	high

Detections

Analytics

CVE-2019-14751

high

Tenable Plugins

high

high

high

high

high