PT-2021-3603 · Python+9 · Python+9

Published 2020-05-05 · Updated 2025-11-07 · CVE-2021-3426

Positive Technologies (AI Summary)

CVSS v3.1

5.7

Medium

Base vector

AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Python versions prior to 3.8.9 Python versions prior to 3.9.3 Python versions prior to 3.10.0a7

Description The issue is related to a flaw in Python 3's pydoc, which could allow a local or adjacent attacker to access sensitive information belonging to another user by starting a pydoc server. This flaw poses a high risk to data confidentiality.

Recommendations For versions prior to 3.8.9, update to version 3.8.9 or later. For versions prior to 3.9.3, update to version 3.9.3 or later. For versions prior to 3.10.0a7, update to version 3.10.0a7 or later.

Exploit

Fix

Information Disclosure

Path traversal

Weakness Enumeration

CWE-200

CWE-22

Related Identifiers

ALSA-2021:4160

ALSA-2021:4162

ALSA-2021:4399

ALT-PU-2020-1914

ALT-PU-2020-3318

ALT-PU-2020-3323

ALT-PU-2021-1596

ALT-PU-2021-2653

ALT-PU-2024-3474

BDU:2021-03708

BIT-LIBPYTHON-2021-3426

BIT-PYTHON-2021-3426

BIT-PYTHON-MIN-2021-3426

CESA-2021_4160

CESA-2021_4162

CESA-2021_4399

CVE-2021-3426

DLA-2619-1

DLA-3477-1

DLA-3980-1

MGASA-2021-0193

OESA-2021-1264

OPENSUSE-SU-2021:4104-1

OPENSUSE-SU-2021_4104-1

OPENSUSE-SU-2024:11283-1

OPENSUSE-SU-2024:11284-1

OPENSUSE-SU-2024:11285-1

OPENSUSE-SU-2024:11286-1

OPENSUSE-SU-2024:12089-1

OPENSUSE-SU-2024:12910-1

OPENSUSE-SU-2024:14109-1

OPENSUSE-SU-2024:14434-1

OPENSUSE-SU-2025:15713-1

PSF-2021-4

RHSA-2021:3254

RHSA-2021:4160

RHSA-2021:4162

RHSA-2021:4399

RHSA-2021_4160

RHSA-2021_4162

RHSA-2021_4399

RLSA-2021:4160

RLSA-2021:4162

ROSA-SA-2025-2873

SUSE-FU-2022:0444-1

SUSE-FU-2022:0445-1

SUSE-SU-2021:1490-1

SUSE-SU-2021:1557-1

SUSE-SU-2021:3486-1

SUSE-SU-2021:4015-1

SUSE-SU-2021:4015-2

SUSE-SU-2021:4104-1

SUSE-SU-2021_1490-1

SUSE-SU-2021_1557-1

SUSE-SU-2021_3486-1

SUSE-SU-2021_4015-1

SUSE-SU-2021_4015-2

SUSE-SU-2021_4104-1

USN-5342-1

USN-5342-3

USN-6891-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Linuxmint

Python

Red Hat

Rocky Linux

Suse

Ubuntu

References · 240

• 🔥 https://github.com/aeyesec/CVE-2022-34265 · Exploit
• 🔥 https://github.com/yetingli/PoCs/tree/main/CVE-2020-28493 · Exploit
• 🔥 https://github.com/ZhaoQi99/CVE-2022-34265 · Exploit
• 🔥 https://github.com/not-xences/CVE-2022-34265 · Exploit
• 🔥 https://github.com/traumatising/CVE-2022-34265 · Exploit
• 🔥 https://github.com/Einstein2150/CVE-2022-48565-POC · Exploit
• 🔥 https://github.com/skazi0/CVE-2021-3572/blob/master/CVE-2021-3572-v9.0.1.patch · Exploit
• https://osv.dev/vulnerability/CVE-2021-3426 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2021:4015-2 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-16935 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-3426 · Security Note
• https://linux.oracle.com/errata/ELSA-2021-4160.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-9636 · Vendor Advisory
• https://oracle.com/security-alerts/cpuoct2021.html · Patch
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QNGAFMPIYIVJ47FCF2NK2PIX22HUG35B · Vendor Advisory