CVE Vulnerabilities

CVE-2018-1060

Published: Jun 18, 2018 | Modified: Nov 07, 2023
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:N/I:N/A:P
RedHat/V2
RedHat/V3
Ubuntu

python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in pop3libs apop() method. An attacker could use this flaw to cause denial of service.

Affected Software

Name Vendor Start Version End Version
Python Python 2.7.0 (including) 2.7.15 (excluding)
Python Python 3.0.0 (including) 3.4.9 (excluding)
Python Python 3.5.0 (including) 3.5.6 (excluding)
Python Python 3.6.0 (excluding) 3.6.5 (excluding)

References