The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-1764 advisory.

    - Security fix for CVE-2019-16056     Resolves: rhbz#1750776
    - Security fix for CVE-2018-20852     Resolves: rhbz#1741553

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2019-4413:04 advisory.

    * python: Cookie domain check returns incorrect results (CVE-2018-20852)
      * python: email.utils.parseaddr wrongly parses email addresses (CVE-2019-16056)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2020-4713:15 advisory.

    * python: Cookie domain check returns incorrect results (CVE-2018-20852)
      * python: email.utils.parseaddr wrongly parses email addresses (CVE-2019-16056)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote OracleVM system is missing necessary patches to address critical security updates :

  - Prefix dot in domain for proper subdomain validation

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has python3 packages installed that are affected by multiple vulnerabilities:

  - http.cookiejar.DefaultPolicy.domain_return_ok in Lib/http/cookiejar.py in Python before 3.7.3 does not     correctly validate the domain: it can be tricked into sending existing cookies to the wrong server. An     attacker may abuse this flaw by using a server with a hostname that has another valid hostname as a suffix     (e.g., pythonicexample.com to steal cookies for example.com). When a program uses     http.cookiejar.DefaultPolicy and tries to do an HTTP connection to an attacker-controlled server, existing     cookies can be leaked to the attacker. This affects 2.x through 2.7.16, 3.x before 3.4.10, 3.5.x before     3.5.7, 3.6.x before 3.6.9, and 3.7.x before 3.7.3. (CVE-2018-20852)

  - An issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7.x     through 3.7.4. The email module wrongly parses email addresses that contain multiple @ characters. An     application that uses the email module and implements some kind of checks on the From/To headers of a     message could be tricked into accepting an email address that should be denied. An attack may be the same     as in CVE-2019-11340; however, this CVE applies to Python more generally. (CVE-2019-16056)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

This update for python fixes the following issues :

  - CVE-2018-20852: Fixed an information leak where cookies     could be send to the wrong server because of incorrect     domain validation (bsc#1141853).

This update was imported from the SUSE:SLE-15:Update update project.

An update of the python2 package has been released.

According to the versions of the python3 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - The documentation XML-RPC server in Python through     2.7.16, 3.x through 3.6.9, and 3.7.x through 3.7.4 has     XSS via the server_title field. This occurs in     Lib/DocXMLRPCServer.py in Python 2.x, and in     Lib/xmlrpc/server.py in Python 3.x. If set_server_title     is called with untrusted input, arbitrary JavaScript     can be delivered to clients that visit the http URL for     this server.(CVE-2019-16935)

  - http.cookiejar.DefaultPolicy.domain_return_ok in     Lib/http/cookiejar.py in Python before 3.7.3 does not     correctly validate the domain: it can be tricked into     sending existing cookies to the wrong server. An     attacker may abuse this flaw by using a server with a     hostname that has another valid hostname as a suffix     (e.g., pythonicexample.com to steal cookies for     example.com). When a program uses     http.cookiejar.DefaultPolicy and tries to do an HTTP     connection to an attacker-controlled server, existing     cookies can be leaked to the attacker. This affects 2.x     through 2.7.16, 3.x before 3.4.10, 3.5.x before 3.5.7,     3.6.x before 3.6.9, and 3.7.x before     3.7.3.(CVE-2018-20852)

  - An issue was discovered in Python through 2.7.16, 3.x     through 3.5.7, 3.6.x through 3.6.9, and 3.7.x through     3.7.4. The email module wrongly parses email addresses     that contain multiple @ characters. An application that     uses the email module and implements some kind of     checks on the From/To headers of a message could be     tricked into accepting an email address that should be     denied. An attack may be the same as in CVE-2019-11340     however, this CVE applies to Python more     generally.(CVE-2019-16056)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the python3 packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities :

  - An issue was discovered in Python through 2.7.16, 3.x     through 3.5.7, 3.6.x through 3.6.9, and 3.7.x through     3.7.4. The email module wrongly parses email addresses     that contain multiple @ characters. An application that     uses the email module and implements some kind of     checks on the From/To headers of a message could be     tricked into accepting an email address that should be     denied. An attack may be the same as in CVE-2019-11340     however, this CVE applies to Python more     generally.(CVE-2019-16056)

  - http.cookiejar.DefaultPolicy.domain_return_ok in     Lib/http/cookiejar.py in Python before 3.7.3 does not     correctly validate the domain: it can be tricked into     sending existing cookies to the wrong server. An     attacker may abuse this flaw by using a server with a     hostname that has another valid hostname as a suffix     (e.g., pythonicexample.com to steal cookies for     example.com). When a program uses     http.cookiejar.DefaultPolicy and tries to do an HTTP     connection to an attacker-controlled server, existing     cookies can be leaked to the attacker. This affects 2.x     through 2.7.16, 3.x before 3.4.10, 3.5.x before 3.5.7,     3.6.x before 3.6.9, and 3.7.x before     3.7.3.(CVE-2018-20852)

  - The documentation XML-RPC server in Python through     2.7.16, 3.x through 3.6.9, and 3.7.x through 3.7.4 has     XSS via the server_title field. This occurs in     Lib/DocXMLRPCServer.py in Python 2.x, and in     Lib/xmlrpc/server.py in Python 3.x. If set_server_title     is called with untrusted input, arbitrary JavaScript     can be delivered to clients that visit the http URL for     this server.(CVE-2019-16935)

  - library/glob.html in the Python 2 and 3 documentation     before 2016 has potentially misleading information     about whether sorting occurs, as demonstrated by     irreproducible cancer-research results. NOTE: the     effects of this documentation cross application     domains, and thus it is likely that security-relevant     code elsewhere is affected. This issue is not a Python     implementation bug, and there are no reports that NMR     researchers were specifically relying on     library/glob.html. In other words, because the older     documentation stated 'finds all the pathnames matching     a specified pattern according to the rules used by the     Unix shell,' one might have incorrectly inferred that     the sorting that occurs in a Unix shell also occurred     for glob.glob. There is a workaround in newer versions     of Willoughby nmr-data_compilation-p2.py and     nmr-data_compilation-p3.py, which call sort()     directly.(CVE-2019-17514)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for python fixes the following issues :

Updated to version 2.7.17 to unify packages among openSUSE:Factory and SLE versions (bsc#1159035).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Published	Updated	Severity
181003	Oracle Linux 8 : python3 (ELSA-2020-1764)	Nessus	Oracle Linux Local Security Checks	9/7/2023	10/22/2024	high
289830	MiracleLinux 4 : python27-python-2.7.17-2.0.1.AXS4 (AXSA:2019-4413:04)	Nessus	Miracle Linux Local Security Checks	1/16/2026	1/16/2026	high
294168	MiracleLinux 7 : python-2.7.5-88.0.1.el7.AXS7 (AXSA:2020-4713:15)	Nessus	Miracle Linux Local Security Checks	1/20/2026	1/20/2026	high
140169	OracleVM 3.4 : python (OVMSA-2020-0036)	Nessus	OracleVM Local Security Checks	9/2/2020	2/22/2024	medium
143922	NewStart CGSL CORE 5.05 / MAIN 5.05 : python3 Multiple Vulnerabilities (NS-SA-2020-0089)	Nessus	NewStart CGSL Local Security Checks	12/9/2020	2/5/2024	high
128139	openSUSE Security Update : python (openSUSE-2019-1988)	Nessus	SuSE Local Security Checks	8/26/2019	5/1/2024	medium
128171	Photon OS 1.0: Python2 PHSA-2019-1.0-0246	Nessus	PhotonOS Local Security Checks	8/26/2019	5/1/2024	medium
128720	Photon OS 2.0: Python2 PHSA-2019-2.0-0171	Nessus	PhotonOS Local Security Checks	9/12/2019	7/23/2024	medium
130824	EulerOS 2.0 SP8 : python3 (EulerOS-SA-2019-2115)	Nessus	Huawei Local Security Checks	11/12/2019	4/12/2024	high
132802	EulerOS Virtualization for ARM 64 3.0.5.0 : python3 (EulerOS-SA-2020-1048)	Nessus	Huawei Local Security Checks	1/13/2020	4/1/2024	high
133259	SUSE SLED15 / SLES15 Security Update : python (SUSE-SU-2020:0234-1) (BEAST) (httpoxy)	Nessus	SuSE Local Security Checks	1/27/2020	3/28/2024	critical

Detections

Analytics

Plugins Search

high

high

high

medium

high

medium

medium

medium

high

high

critical