A vulnerability has been discovered in Python, an interactive high-level object-oriented language, that is relevant for cookie handling. By using a malicious server an attacker might steal cookies that are meant for other domains

For Debian 8 'Jessie', this problem has been fixed in version 2.7.9-2+deb8u4.

We recommend that you upgrade your python2.7 packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

An update of the python2 package has been released.

* python: Cookie domain check returns incorrect results * python:
email.utils.parseaddr wrongly parses email addresses

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:1131 advisory.

  - python: Cookie domain check returns incorrect results     (CVE-2018-20852)

  - python: email.utils.parseaddr wrongly parses email     addresses (CVE-2019-16056)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

This update for python3 fixes the following issues :

CVE-2019-20907: Fixed denial of service by avoiding possible infinite loop in specifically crafted tarball (bsc#1174091).

CVE-2020-14422: Fixed an improper computation of hash values in the IPv4Interface and IPv6Interface could have led to denial of service (bsc#1173274).

CVE-2019-16935: Fixed a reflected XSS in python/Lib/DocXMLRPCServer.py (bsc#1153238).

CVE-2019-9947: Fixed an issue in urllib2 which allowed CRLF injection if the attacker controls a url parameter (bsc#1130840).

If the locale is 'C', coerce it to C.UTF-8 (bsc#1162423).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:1132 advisory.

  - python: Cookie domain check returns incorrect results (CVE-2018-20852)

  - python: email.utils.parseaddr wrongly parses email addresses (CVE-2019-16056)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:1131 advisory.

  - python: Cookie domain check returns incorrect results (CVE-2018-20852)

  - python: email.utils.parseaddr wrongly parses email addresses (CVE-2019-16056)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:1605 advisory.

  - python-requests: Redirect from HTTPS to HTTP does not remove Authorization header (CVE-2018-18074)

  - python-urllib3: Cross-host redirect does not remove Authorization header allow for credential exposure     (CVE-2018-20060)

  - python: Cookie domain check returns incorrect results (CVE-2018-20852)

  - python-urllib3: CRLF injection due to not encoding the '\r\n' sequence leading to possible attack on     internal service (CVE-2019-11236)

  - python-urllib3: Certification mishandle when error should be thrown (CVE-2019-11324)

  - python: email.utils.parseaddr wrongly parses email addresses (CVE-2019-16056)

  - python: XSS vulnerability in the documentation XML-RPC server in server_title field (CVE-2019-16935)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-1605 advisory.

  - The Requests package before 2.20.0 for Python sends an HTTP Authorization header to an http URI upon     receiving a same-hostname https-to-http redirect, which makes it easier for remote attackers to discover     credentials by sniffing the network. (CVE-2018-18074)

  - urllib3 before version 1.23 does not remove the Authorization HTTP header when following a cross-origin     redirect (i.e., a redirect that differs in host, port, or scheme). This can allow for credentials in the     Authorization header to be exposed to unintended hosts or transmitted in cleartext. (CVE-2018-20060)

  - In the urllib3 library through 1.24.1 for Python, CRLF injection is possible if the attacker controls the     request parameter. (CVE-2019-11236)

  - http.cookiejar.DefaultPolicy.domain_return_ok in Lib/http/cookiejar.py in Python before 3.7.3 does not     correctly validate the domain: it can be tricked into sending existing cookies to the wrong server. An     attacker may abuse this flaw by using a server with a hostname that has another valid hostname as a suffix     (e.g., pythonicexample.com to steal cookies for example.com). When a program uses     http.cookiejar.DefaultPolicy and tries to do an HTTP connection to an attacker-controlled server, existing     cookies can be leaked to the attacker. This affects 2.x through 2.7.16, 3.x before 3.4.10, 3.5.x before     3.5.7, 3.6.x before 3.6.9, and 3.7.x before 3.7.3. (CVE-2018-20852)

  - The urllib3 library before 1.24.2 for Python mishandles certain cases where the desired set of CA     certificates is different from the OS store of CA certificates, which results in SSL connections     succeeding in situations where a verification failure is the correct outcome. This is related to use of     the ssl_context, ca_certs, or ca_certs_dir argument. (CVE-2019-11324)

  - An issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7.x     through 3.7.4. The email module wrongly parses email addresses that contain multiple @ characters. An     application that uses the email module and implements some kind of checks on the From/To headers of a     message could be tricked into accepting an email address that should be denied. An attack may be the same     as in CVE-2019-11340; however, this CVE applies to Python more generally. (CVE-2019-16056)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for python3 fixes the following issues :

CVE-2019-16056: Fixed a parser issue in the email module.
(bsc#1149955)

CVE-2018-20852: Fixed an incorrect domain validation that could lead to cookies being sent to the wrong server. (bsc#1141853)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for python3 fixes the following issues :

Security issue fixed :

CVE-2019-10160: Fixed a regression in urlparse() and urlsplit() introduced by the fix for CVE-2019-9636 (bsc#1138459).

CVE-2018-20852: Fixed an information leak where cookies could be send to the wrong server because of incorrect domain validation (bsc#1141853).

Non-security issue fixed: Fixed an issue where the SIGINT signal was ignored or not handled (bsc#1094814).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for python fixes the following issues :

Updated to version 2.7.17 to unify packages among openSUSE:Factory and SLE versions (bsc#1159035).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Published	Updated	Severity
128426	Debian DLA-1906-1 : python2.7 security update	Nessus	Debian Local Security Checks	9/3/2019	1/11/2021	medium
128720	Photon OS 2.0: Python2 PHSA-2019-2.0-0171	Nessus	PhotonOS Local Security Checks	9/12/2019	12/30/2019	medium
135830	Scientific Linux Security Update : python3 on SL7.x x86_64 (20200407)	Nessus	Scientific Linux Local Security Checks	4/21/2020	3/15/2024	high
135343	CentOS 7 : python (CESA-2020:1131)	Nessus	CentOS Local Security Checks	4/10/2020	3/19/2024	high
143782	SUSE SLES12 Security Update : python3 (SUSE-SU-2020:2699-1)	Nessus	SuSE Local Security Checks	12/9/2020	2/5/2024	high
135056	RHEL 7 : python3 (RHSA-2020:1132)	Nessus	Red Hat Local Security Checks	4/1/2020	3/20/2024	high
135059	RHEL 7 : python (RHSA-2020:1131)	Nessus	Red Hat Local Security Checks	4/1/2020	3/20/2024	high
145889	CentOS 8 : python27:2.7 (CESA-2020:1605)	Nessus	CentOS Local Security Checks	2/1/2021	1/24/2024	critical
180976	Oracle Linux 8 : python27:2.7 (ELSA-2020-1605)	Nessus	Oracle Linux Local Security Checks	9/7/2023	9/7/2023	critical
130361	SUSE SLED12 / SLES12 Security Update : python3 (SUSE-SU-2019:2798-1)	Nessus	SuSE Local Security Checks	10/29/2019	4/16/2024	high
127766	SUSE SLED15 / SLES15 Security Update : python3 (SUSE-SU-2019:2050-1)	Nessus	SuSE Local Security Checks	8/12/2019	1/13/2021	critical
133259	SUSE SLED15 / SLES15 Security Update : python (SUSE-SU-2020:0234-1) (BEAST) (httpoxy)	Nessus	SuSE Local Security Checks	1/27/2020	3/28/2024	critical

Detections

Analytics

Plugins Search

medium

medium

high

high

high

high

high

critical

critical

high

critical

critical