The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:3520 advisory.

    Python is an interpreted, interactive, object-oriented programming language, which includes modules,     classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to     many system calls and libraries, as well as to various windowing systems.

    Security Fix(es):

    * python: NULL pointer dereference using a specially crafted X509 certificate (CVE-2019-5010)

    * python: CRLF injection via the query part of the url passed to urlopen() (CVE-2019-9740)

    * python: CRLF injection via the path part of the url passed to urlopen() (CVE-2019-9947)

    * python: Undocumented local_file protocol allows remote attackers to bypass protection mechanisms     (CVE-2019-9948)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.1 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the python packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities :

  - http.cookiejar.DefaultPolicy.domain_return_ok in     Lib/http/cookiejar.py in Python before 3.7.3 does not     correctly validate the domain: it can be tricked into     sending existing cookies to the wrong server. An     attacker may abuse this flaw by using a server with a     hostname that has another valid hostname as a suffix     (e.g., pythonicexample.com to steal cookies for     example.com). When a program uses     http.cookiejar.DefaultPolicy and tries to do an HTTP     connection to an attacker-controlled server, existing     cookies can be leaked to the attacker. This affects 2.x     through 2.7.16, 3.x before 3.4.10, 3.5.x before 3.5.7,     3.6.x before 3.6.9, and 3.7.x before     3.7.3.(CVE-2018-20852)

  - An issue was discovered in urllib2 in Python 2.x     through 2.7.16 and urllib in Python 3.x through 3.7.3.
    CRLF injection is possible if the attacker controls a     url parameter, as demonstrated by the first argument to     urllib.request.urlopen with \r\n (specifically in the     path component of a URL that lacks a ? character)     followed by an HTTP header or a Redis command. This is     similar to the CVE-2019-9740 query string     issue.(CVE-2019-9947)

  - An issue was discovered in urllib2 in Python 2.x     through 2.7.16 and urllib in Python 3.x through 3.7.3.
    CRLF injection is possible if the attacker controls a     url parameter, as demonstrated by the first argument to     urllib.request.urlopen with \r\n (specifically in the     query string after a ? character) followed by an HTTP     header or a Redis command.(CVE-2019-9740)

  - An issue was discovered in Python through 2.7.16, 3.x     through 3.5.7, 3.6.x through 3.6.9, and 3.7.x through     3.7.4. The email module wrongly parses email addresses     that contain multiple @ characters. An application that     uses the email module and implements some kind of     checks on the From/To headers of a message could be     tricked into accepting an email address that should be     denied. An attack may be the same as in CVE-2019-11340     however, this CVE applies to Python more     generally.(CVE-2019-16056)

  - The documentation XML-RPC server in Python through     2.7.16, 3.x through 3.6.9, and 3.7.x through 3.7.4 has     XSS via the server_title field. This occurs in     Lib/DocXMLRPCServer.py in Python 2.x, and in     Lib/xmlrpc/server.py in Python 3.x. If set_server_title     is called with untrusted input, arbitrary JavaScript     can be delivered to clients that visit the http URL for     this server.(CVE-2019-16935)

  - library/glob.html in the Python 2 and 3 documentation     before 2016 has potentially misleading information     about whether sorting occurs, as demonstrated by     irreproducible cancer-research results. NOTE: the     effects of this documentation cross application     domains, and thus it is likely that security-relevant     code elsewhere is affected. This issue is not a Python     implementation bug, and there are no reports that NMR     researchers were specifically relying on     library/glob.html. In other words, because the older     documentation stated 'finds all the pathnames matching     a specified pattern according to the rules used by the     Unix shell,' one might have incorrectly inferred that     the sorting that occurs in a Unix shell also occurred     for glob.glob. There is a workaround in newer versions     of Willoughby nmr-data_compilation-p2.py and     nmr-data_compilation-p3.py, which call sort()     directly.(CVE-2019-17514)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-202003-26 (Python: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Python. Please review       the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could possibly perform a CRLF injection attack, obtain       sensitive information, trick Python into sending cookies to the wrong       domain or cause a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:1346 advisory.

    Python is an interpreted, interactive, object-oriented programming language, which includes modules,     classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to     many system calls and libraries, as well as to various windowing systems.

    Security Fix(es):

    * python: DOS via regular expression backtracking in difflib.IS_LINE_JUNK method in difflib     (CVE-2018-1061)

    * python: Missing salt initialization in _elementtree.c module (CVE-2018-14647)

    * python: CRLF injection via the query part of the url passed to urlopen() (CVE-2019-9740)

    * python: CRLF injection via the path part of the url passed to urlopen() (CVE-2019-9947)

    * python: Undocumented local_file protocol allows remote attackers to bypass protection mechanisms     (CVE-2019-9948)

    * python: DOS via regular expression catastrophic backtracking in apop() method in pop3lib (CVE-2018-1060)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:3725 advisory.

    Python is an interpreted, interactive, object-oriented programming language, which includes modules,     classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to     many system calls and libraries, as well as to various windowing systems.

    The following packages have been upgraded to a later upstream version: rh-python36-python (3.6.9).
    (BZ#1709344)

    Security Fix(es):

    * python: DOS via regular expression backtracking in difflib.IS_LINE_JUNK method in difflib     (CVE-2018-1061)

    * python: Missing salt initialization in _elementtree.c module (CVE-2018-14647)

    * python: Cookie domain check returns incorrect results (CVE-2018-20852)

    * python: NULL pointer dereference using a specially crafted X509 certificate (CVE-2019-5010)

    * python: CRLF injection via the query part of the url passed to urlopen() (CVE-2019-9740)

    * python: CRLF injection via the path part of the url passed to urlopen() (CVE-2019-9947)

    * python: email.utils.parseaddr wrongly parses email addresses (CVE-2019-16056)

    * python: DOS via regular expression catastrophic backtracking in apop() method in pop3lib (CVE-2018-1060)

    * python: Integer overflow in Modules/_pickle.c allows for memory exhaustion if serializing gigabytes of     data (CVE-2018-20406)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * urlsplit doesn't accept a NFKD hostname with a port number (BZ#1709340)

    * rh-python36 cannot unpickle datetime.date objects (BZ#1749103)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the python3 package has been released.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:1462 advisory.

    Python is an interpreted, interactive, object-oriented programming language, which includes modules,     classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to     many system calls and libraries, as well as to various windowing systems.

    Security Fix(es):

    * python: Missing salt initialization in _elementtree.c module (CVE-2018-14647)

    * python: CRLF injection via the query part of the url passed to urlopen() (CVE-2019-9740)

    * python: CRLF injection via the path part of the url passed to urlopen() (CVE-2019-9947)

    * python: Undocumented local_file protocol allows remote attackers to bypass protection mechanisms     (CVE-2019-9948)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AOS installed on the remote host is prior to 5.11.2. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-5.11.2 advisory.

  - curl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code. The internal     function Curl_ntlm_core_mk_nt_hash multiplies the length of the password by two (SUM) to figure out how     large temporary storage area to allocate from the heap. The length value is then subsequently used to     iterate over the password and generate output into the allocated storage buffer. On systems with a 32 bit     size_t, the math to calculate SUM triggers an integer overflow when the password length exceeds 2GB (2^31     bytes). This integer overflow usually causes a very small buffer to actually get allocated instead of the     intended very huge one, making the use of that buffer end up in a heap buffer overflow. (This bug is     almost identical to CVE-2017-8816.) (CVE-2018-14618)

  - Gnome Pango 1.42 and later is affected by: Buffer Overflow. The impact is: The heap based buffer overflow     can be used to get code execution. The component is: function name: pango_log2vis_get_embedding_levels,     assignment of nchars and the loop condition. The attack vector is: Bug can be used when application pass     invalid utf-8 strings to functions like pango_itemize. (CVE-2019-1010238)

  - Buffer overflow in the readextension function in gif2tiff.c in LibTIFF 4.0.6 allows remote attackers to     cause a denial of service (application crash) via a crafted GIF file. (CVE-2016-3186)

  - TIFFWriteScanline in tif_write.c in LibTIFF 3.8.2 has a heap-based buffer over-read, as demonstrated by     bmp2tiff. (CVE-2018-10779)

  - The TIFFWriteDirectorySec() function in tif_dirwrite.c in LibTIFF through 4.0.9 allows remote attackers to     cause a denial of service (assertion failure and application crash) via a crafted file, a different     vulnerability than CVE-2017-13726. (CVE-2018-10963)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
130548	RHEL 8 : python3 (RHSA-2019:3520)	Nessus	Red Hat Local Security Checks	11/6/2019	11/7/2024	critical
134501	EulerOS Virtualization for ARM 64 3.0.2.0 : python (EulerOS-SA-2020-1212)	Nessus	Huawei Local Security Checks	3/13/2020	3/22/2024	high
134603	GLSA-202003-26 : Python: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	3/16/2020	3/22/2024	critical
135247	RHEL 7 : python (RHSA-2020:1346)	Nessus	Red Hat Local Security Checks	4/7/2020	11/7/2024	critical
194161	RHEL 6 / 7 : rh-python36-python (RHSA-2019:3725)	Nessus	Red Hat Local Security Checks	4/28/2024	11/7/2024	critical
202777	Photon OS 3.0: Python3 PHSA-2019-3.0-0016	Nessus	PhotonOS Local Security Checks	7/22/2024	7/24/2024	medium
135459	RHEL 7 : python (RHSA-2020:1462)	Nessus	Red Hat Local Security Checks	4/14/2020	11/7/2024	critical
164608	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-5.11.2)	Nessus	Misc.	9/1/2022	2/17/2025	critical

Detections

Analytics

Plugins Search

critical

high

critical

critical

critical

medium

critical

critical