VDB
BDU%3A2020-00690
BDU%3A2020-00690
PUBLISHED
CVSS 5 MEDIUM
Уязвимость интерпретатора языка программирования Python, связанная с ошибками управления регистрационными данными, позволяющая нарушителю получить доступ к конфиденциальным данным
Risk Scores
CVSS 2.0
5
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat Inc., Canonical Ltd., Сообщество свободного программного обеспечения, Novell Inc., ООО «РусБИТех-Астра», Fedora Project, Oracle Corp., Python Software Foundation, АО «Концерн ВНИИНС» | Red Hat Enterprise Linux, Ubuntu, Debian GNU/Linux, OpenSUSE Leap, Astra Linux Special Edition (запись в едином реестре российских программ №369), Suse Linux Enterprise Desktop, SUSE Enterprise Storage, SUSE Linux Enterprise Server for SAP Applications, SUSE Linux Enterprise Software Development Kit, SUSE OpenStack Cloud, SUSE Linux Enterprise Module for Open Buildservice Development Tools, Red Hat Virtualization, Suse Linux Enterprise Server, Fedora, SUSE Linux Enterprise Module for Web Scripting, Astra Linux Common Edition (запись в едином реестре российских программ №4433), SUSE Linux Enterprise Module for Basesystem, SUSE CaaS Platform, SUSE Linux Enterprise Module for Desktop Applications, SUSE Linux Enterprise Module for Development Tools, SUSE Linux Enterprise Point of Sale, OpenStack Cloud Magnum Orchestration, Red Hat Software Collections, SUSE Linux Enterprise High Performance Computing, Astra Linux Special Edition для «Эльбрус» (запись в едином реестре российских программ №11156), Sun ZFS Storage Appliance Kit, Python, SUSE Linux Enterprise Module for Python2 packages, ОС ОН «Стрелец» (запись в едином реестре российских программ №6177) |
Timeline
- Feb 24, 2020 CVE Published
- Nov 21, 2023 CVE Updated
References
- https://access.redhat.com/security/cve/CVE-2019-9636 url
- https://bugs.python.org/issue36216 url
- https://github.com/python/cpython/pull/12201 url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/46PVWY5LFP4BRPG3BVQ5QEEFYBVEXHCK/ url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AEZ5IQT7OF7Q2NCGIVABOWYGKO7YU3NJ/ url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CFBAAGM27H73OLYBUA2IAZFSUN6KGLME/ url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D3LXPABKVLFYUHRYJPM3CSS5MS6FXKS7/ url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ICBEGRHIPHWPG2VGYS6R4EVKVUUF4AQW/ url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IFAXBEY2TGOBDRKTR556JBXBVFSAKD6I/ url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JSKPGPZQNTAULHW4UH63KGOOUIDE4RRB/ url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L25RTMKCF62DLC2XVSNXGX7C7HXISLVM/ url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TR6GCO3WTV4D5L23WTCBF275VE6BVNI3/ url
- https://nvd.nist.gov/vuln/detail/CVE-2019-9636 url
- https://people.canonical.com/~ubuntu-security/cve/2019/CVE-2019-9636.html url
- https://python-security.readthedocs.io/vuln/urlsplit-nfkc-normalization.html url
- https://security-tracker.debian.org/tracker/CVE-2019-9636 url
- https://wiki.astralinux.ru/astra-linux-se16-bulletin-20210611SE16 url
- https://www.oracle.com/security-alerts/public-vuln-to-advisory-mapping.html url
- https://www.suse.com/security/cve/CVE-2019-9636 url
- https://wiki.astralinux.ru/pages/viewpage.action?pageId=47416144 url
…and 3 more