The Wave_read._read_fmt_chunk function in Lib/wave.py in Python through 3.6.4 does not ensure a nonzero channel value, which allows attackers to cause a denial of service (divide-by-zero and exception) via a crafted wav format audio file. NOTE: the vendor disputes this issue because Python applications "need to be prepared to handle a wide variety of exceptions.

An update of the python3 package has been released.

According to the versions of the python packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - Python 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6     through 3.6.10, 3.7 through 3.7.6, and 3.8 through     3.8.1 allows an HTTP server to conduct Regular     Expression Denial of Service (ReDoS) attacks against a     client because of     urllib.request.AbstractBasicAuthHandler catastrophic     backtracking.(CVE-2020-8492)

  - Lib/zipfile.py in Python through 3.7.2 allows remote     attackers to cause a denial of service (resource     consumption) via a ZIP bomb.(CVE-2019-9674)

  - ** DISPUTED ** The Wave_read._read_fmt_chunk function     in Lib/wave.py in Python through 3.6.4 does not ensure     a nonzero channel value, which allows attackers to     cause a denial of service (divide-by-zero and     exception) via a crafted wav format audio file. NOTE:
    the vendor disputes this issue because Python     applications 'need to be prepared to handle a wide     variety of exceptions.'(CVE-2017-18207)

  - Python Software Foundation Python (CPython) version 2.7     contains a CWE-77: Improper Neutralization of Special     Elements used in a Command ('Command Injection')     vulnerability in shutil module (make_archive function)     that can result in Denial of service, Information gain     via injection of arbitrary files on the system or     entire drive. This attack appear to be exploitable via     Passage of unfiltered user input to the function. This     vulnerability appears to have been fixed in after     commit     add531a1e55b0a739b0f42582f1c9747e5649ace.(CVE-2018-1000     802)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the python packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - The Wave_read._read_fmt_chunk function in Lib/wave.py     in Python through 3.6.4 does not ensure a nonzero     channel value, which allows attackers to cause a denial     of service (divide-by-zero and exception) via a crafted     wav format audio file. NOTE: the vendor disputes this     issue because Python applications 'need to be prepared     to handle a wide variety of     exceptions.'(CVE-2017-18207)

  - Python Software Foundation Python (CPython) version 2.7     contains a CWE-77: Improper Neutralization of Special     Elements used in a Command ('Command Injection')     vulnerability in shutil module (make_archive function)     that can result in Denial of service, Information gain     via injection of arbitrary files on the system or     entire drive. This attack appear to be exploitable via     Passage of unfiltered user input to the function. This     vulnerability appears to have been fixed in after     commit     add531a1e55b0a739b0f42582f1c9747e5649ace.(CVE-2018-1000     802)

  - Python 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6     through 3.6.10, 3.7 through 3.7.6, and 3.8 through     3.8.1 allows an HTTP server to conduct Regular     Expression Denial of Service (ReDoS) attacks against a     client because of     urllib.request.AbstractBasicAuthHandler catastrophic     backtracking.(CVE-2020-8492)

  - Lib/zipfile.py in Python through 3.7.2 allows remote     attackers to cause a denial of service (resource     consumption) via a ZIP bomb.(CVE-2019-9674)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the python2 packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities :

  - A ZIP bomb attack was found in the Python zipfile     module. A remote attacker could abuse this flaw by     providing a specially crafted ZIP file that, when     decompressed by zipfile, would exhaust system resources     resulting in a denial of service.(CVE-2019-9674)

  - The Wave_read._read_fmt_chunk function in Lib/wave.py     in Python through 3.6.4 does not ensure a nonzero     channel value, which allows attackers to cause a denial     of service (divide-by-zero and exception) via a crafted     wav format audio file. NOTE: the vendor disputes this     issue because Python applications 'need to be prepared     to handle a wide variety of     exceptions.'(CVE-2017-18207)

  - Python 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6     through 3.6.10, 3.7 through 3.7.6, and 3.8 through     3.8.1 allows an HTTP server to conduct Regular     Expression Denial of Service (ReDoS) attacks against a     client because of     urllib.request.AbstractBasicAuthHandler catastrophic     backtracking.(CVE-2020-8492)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the python2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - ** DISPUTED ** The Wave_read._read_fmt_chunk function     in Lib/wave.py in Python through 3.6.4 does not ensure     a nonzero channel value, which allows attackers to     cause a denial of service (divide-by-zero and     exception) via a crafted wav format audio file. NOTE:
    the vendor disputes this issue because Python     applications 'need to be prepared to handle a wide     variety of exceptions.'(CVE-2017-18207)

  - Python 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6     through 3.6.10, 3.7 through 3.7.6, and 3.8 through     3.8.1 allows an HTTP server to conduct Regular     Expression Denial of Service (ReDoS) attacks against a     client because of     urllib.request.AbstractBasicAuthHandler catastrophic     backtracking.(CVE-2020-8492)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for python36 to version 3.6.10 fixes the following issues :

CVE-2017-18207: Fixed a denial of service in Wave_read._read_fmt_chunk() (bsc#1083507).

CVE-2019-16056: Fixed an issue where email parsing could fail for multiple @ signs (bsc#1149955).

CVE-2019-15903: Fixed a heap-based buffer over-read in libexpat (bsc#1149429).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for python fixes the following issues :

Updated to version 2.7.17 to unify packages among openSUSE:Factory and SLE versions (bsc#1159035).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for python3 to version 3.6.10 fixes the following issues :

  - CVE-2017-18207: Fixed a denial of service in     Wave_read._read_fmt_chunk() (bsc#1083507).

  - CVE-2019-16056: Fixed an issue where email parsing could     fail for multiple @ (bsc#1149955).

  - CVE-2019-15903: Fixed a heap-based buffer over-read in     libexpat (bsc#1149429).

This update was imported from the SUSE:SLE-15:Update update project.

This update for python3 to version 3.6.10 fixes the following issues :

CVE-2017-18207: Fixed a denial of service in Wave_read._read_fmt_chunk() (bsc#1083507).

CVE-2019-16056: Fixed an issue where email parsing could fail for multiple @ (bsc#1149955).

CVE-2019-15903: Fixed a heap-based buffer over-read in libexpat (bsc#1149429).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for python fixes the following issues :

The following security vulnerabilities were addressed :

  - Add a check to Lib/wave.py that verifies that at least     one channel is provided. Prior to this, attackers could     cause a denial of service via a crafted wav format audio     file. [bsc#1083507, CVE-2017-18207]

This update was imported from the SUSE:SLE-12-SP1:Update update project.

This update for python fixes the following issues: The following security vulnerabilities were addressed :

  - Add a check to Lib/wave.py that verifies that at least     one channel is provided. Prior to this, attackers could     cause a denial of service via a crafted wav format audio     file. [bsc#1083507, CVE-2017-18207]

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for python3 fixes the following issues :

Security issue fixed :

  - CVE-2017-18207: Fixed possible denial of service     vulnerability by adding a check to Lib/wave.py that     verifies that at least one channel is provided     (bsc#1083507).

This update was imported from the SUSE:SLE-12:Update update project.

This update for python3 fixes the following issues: Security issue fixed :

  - CVE-2017-18207: Fixed possible denial of service     vulnerability by adding a check to Lib/wave.py that     verifies that at least one channel is provided     (bsc#1083507). Bug fixes :

  - Require python-Sphinx-latex for building on Leap 42.3 or     newer.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
203054	Photon OS 2.0: Python3 PHSA-2018-2.0-0037	Nessus	PhotonOS Local Security Checks	medium
137488	EulerOS 2.0 SP2 : python (EulerOS-SA-2020-1646)	Nessus	Huawei Local Security Checks	critical
135556	EulerOS 2.0 SP3 : python (EulerOS-SA-2020-1427)	Nessus	Huawei Local Security Checks	critical
135131	EulerOS Virtualization for ARM 64 3.0.6.0 : python2 (EulerOS-SA-2020-1344)	Nessus	Huawei Local Security Checks	high
134787	EulerOS 2.0 SP8 : python2 (EulerOS-SA-2020-1295)	Nessus	Huawei Local Security Checks	medium
133448	SUSE SLES12 Security Update : python36 (SUSE-SU-2020:0302-1)	Nessus	SuSE Local Security Checks	critical
133259	SUSE SLED15 / SLES15 Security Update : python (SUSE-SU-2020:0234-1) (BEAST) (httpoxy)	Nessus	SuSE Local Security Checks	critical
133172	openSUSE Security Update : python3 (openSUSE-2020-86) (BEAST) (httpoxy)	Nessus	SuSE Local Security Checks	critical
133036	SUSE SLED15 / SLES15 Security Update : python3 (SUSE-SU-2020:0114-1) (BEAST) (httpoxy)	Nessus	SuSE Local Security Checks	critical
121828	Photon OS 1.0: Python3 PHSA-2018-1.0-0126	Nessus	PhotonOS Local Security Checks	medium
111431	openSUSE Security Update : python (openSUSE-2018-779)	Nessus	SuSE Local Security Checks	medium
111263	SUSE SLED12 / SLES12 Security Update : python (SUSE-SU-2018:2040-1)	Nessus	SuSE Local Security Checks	medium
110685	SUSE SLES11 Security Update : python (SUSE-SU-2018:1786-1)	Nessus	SuSE Local Security Checks	medium
109069	openSUSE Security Update : python3 (openSUSE-2018-372)	Nessus	SuSE Local Security Checks	medium
109028	SUSE SLED12 / SLES12 Security Update : python3 (SUSE-SU-2018:0934-1)	Nessus	SuSE Local Security Checks	medium

Detections

Analytics

CVE-2017-18207

medium

Tenable Plugins

medium

critical

critical

high

medium

critical

critical

critical

critical

medium

medium

medium

medium

medium

medium