PT-2019-5897 · Python+4 · Python+4

Published 2019-10-23 · Updated 2024-07-11 · CVE-2019-18348

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Python (affected versions not specified)

Description The issue is related to a CRLF injection vulnerability in the urllib2 module of the Python programming language. This could allow a remote attacker to impact data integrity.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Special Elements Injection

Weakness Enumeration

CWE-74

Related Identifiers

ALT-PU-2020-1914

ALT-PU-2020-2220

ALT-PU-2020-3318

ALT-PU-2020-3323

ALT-PU-2021-2653

ALT-PU-2024-3474

BDU:2021-03715

CVE-2019-18348

DLA-2280-1

OPENSUSE-SU-2020:0696-1

OPENSUSE-SU-2020:2332-1

OPENSUSE-SU-2020:2333-1

OPENSUSE-SU-2020_0696-1

OPENSUSE-SU-2020_2332-1

OPENSUSE-SU-2020_2333-1

OPENSUSE-SU-2022_4281-1

OPENSUSE-SU-2024:11202-1

OPENSUSE-SU-2024:11284-1

PSF-2019-7

RHSA-2020:4273

RHSA-2020:4285

SUSE-SU-2020:0750-1

SUSE-SU-2020:0854-1

SUSE-SU-2020:1339-1

SUSE-SU-2020:1524-1

SUSE-SU-2020:3865-1

SUSE-SU-2020:3930-1

SUSE-SU-2020_0750-1

SUSE-SU-2020_0854-1

SUSE-SU-2020_1339-1

SUSE-SU-2020_1524-1

SUSE-SU-2020_3865-1

SUSE-SU-2021:0794-1

SUSE-SU-2021_0794-1

SUSE-SU-2022:4281-1

SUSE-SU-2022_4281-1

USN-4333-1

USN-4333-2

USN-6891-1

Affected Products

Alt Linux

Linuxmint

Python

Suse

Ubuntu

References · 385

• 🔥 https://github.com/Einstein2150/CVE-2022-48565-POC · Exploit
• https://ubuntu.com/security/CVE-2021-3177 · Vendor Advisory
• https://bdu.fstec.ru/vul/2018-01554 · Security Note
• https://bdu.fstec.ru/vul/2020-03946 · Security Note
• https://errata.altlinux.org/ALT-PU-2020-3318 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-18348 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-03738 · Security Note
• https://bdu.fstec.ru/vul/2021-03740 · Security Note
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4X3HW5JRZ7GCPSR7UHJOLD7AWLTQCDVR · Vendor Advisory
• https://safe-surf.ru/specialists/bulletins-nkcki/695338 · Security Note
• https://safe-surf.ru/specialists/bulletins-nkcki/690854 · Security Note
• https://ubuntu.com/security/CVE-2019-9674 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-06945 · Security Note
• https://ubuntu.com/security/CVE-2023-24329 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2020:1524-1 · Vendor Advisory