CVE Vulnerabilities

CVE-2020-27619

Published: Oct 22, 2020 | Modified: Feb 03, 2024
CVSS 3.x
9.8
CRITICAL
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
7.5 MODERATE
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Ubuntu
LOW

In Python 3 through 3.9.0, the Lib/test/multibytecodec_support.py CJK codec tests call eval() on content retrieved via HTTP.

Affected Software

Name Vendor Start Version End Version
Python Python 3.0.0 (including) 3.6.13 (excluding)
Python Python 3.7.0 (including) 3.7.10 (excluding)
Python Python 3.8.0 (including) 3.8.7 (excluding)
Python Python 3.9.0 (including) 3.9.1 (excluding)
Red Hat Enterprise Linux 8 RedHat python3-0:3.6.8-37.el8 *
Red Hat Enterprise Linux 8 RedHat python27:2.7-8050020210811095446.3e7ace8b *
Red Hat Enterprise Linux 8 RedHat python38:3.8-8050020210811101222.e3d35cca *
Red Hat Enterprise Linux 8 RedHat python38-devel:3.8-8050020210811101222.e3d35cca *
Red Hat Enterprise Linux 8 RedHat python3-0:3.6.8-37.el8 *
Red Hat Software Collections for Red Hat Enterprise Linux 7 RedHat python27-babel-0:0.9.6-10.el7 *
Red Hat Software Collections for Red Hat Enterprise Linux 7 RedHat python27-python-0:2.7.18-3.el7 *
Red Hat Software Collections for Red Hat Enterprise Linux 7 RedHat python27-python-jinja2-0:2.6-16.el7 *
Red Hat Software Collections for Red Hat Enterprise Linux 7 RedHat python27-python-pygments-0:1.5-5.el7 *
Red Hat Software Collections for Red Hat Enterprise Linux 7 RedHat rh-python38-babel-0:2.7.0-12.el7 *
Red Hat Software Collections for Red Hat Enterprise Linux 7 RedHat rh-python38-python-0:3.8.11-2.el7 *
Red Hat Software Collections for Red Hat Enterprise Linux 7 RedHat rh-python38-python-cryptography-0:2.8-5.el7 *
Red Hat Software Collections for Red Hat Enterprise Linux 7 RedHat rh-python38-python-jinja2-0:2.10.3-6.el7 *
Red Hat Software Collections for Red Hat Enterprise Linux 7 RedHat rh-python38-python-lxml-0:4.4.1-7.el7 *
Red Hat Software Collections for Red Hat Enterprise Linux 7 RedHat rh-python38-python-pip-0:19.3.1-2.el7 *
Red Hat Software Collections for Red Hat Enterprise Linux 7 RedHat rh-python38-python-urllib3-0:1.25.7-7.el7 *
Red Hat Software Collections for Red Hat Enterprise Linux 7.7 EUS RedHat python27-babel-0:0.9.6-10.el7 *
Red Hat Software Collections for Red Hat Enterprise Linux 7.7 EUS RedHat python27-python-0:2.7.18-3.el7 *
Red Hat Software Collections for Red Hat Enterprise Linux 7.7 EUS RedHat python27-python-jinja2-0:2.6-16.el7 *
Red Hat Software Collections for Red Hat Enterprise Linux 7.7 EUS RedHat python27-python-pygments-0:1.5-5.el7 *
Red Hat Software Collections for Red Hat Enterprise Linux 7.7 EUS RedHat rh-python38-babel-0:2.7.0-12.el7 *
Red Hat Software Collections for Red Hat Enterprise Linux 7.7 EUS RedHat rh-python38-python-0:3.8.11-2.el7 *
Red Hat Software Collections for Red Hat Enterprise Linux 7.7 EUS RedHat rh-python38-python-cryptography-0:2.8-5.el7 *
Red Hat Software Collections for Red Hat Enterprise Linux 7.7 EUS RedHat rh-python38-python-jinja2-0:2.10.3-6.el7 *
Red Hat Software Collections for Red Hat Enterprise Linux 7.7 EUS RedHat rh-python38-python-lxml-0:4.4.1-7.el7 *
Red Hat Software Collections for Red Hat Enterprise Linux 7.7 EUS RedHat rh-python38-python-pip-0:19.3.1-2.el7 *
Red Hat Software Collections for Red Hat Enterprise Linux 7.7 EUS RedHat rh-python38-python-urllib3-0:1.25.7-7.el7 *
Python2.7 Ubuntu trusty *
Python3.4 Ubuntu trusty *
Python3.4 Ubuntu trusty/esm *
Python3.5 Ubuntu esm-infra-legacy/trusty *
Python3.5 Ubuntu trusty *
Python3.5 Ubuntu trusty/esm *
Python3.5 Ubuntu xenial *
Python3.6 Ubuntu bionic *
Python3.7 Ubuntu bionic *
Python3.8 Ubuntu bionic *
Python3.8 Ubuntu focal *
Python3.8 Ubuntu groovy *

References