CVE-2013-5123 REJECTED

The mirroring support (-M, --use-mirrors) in Python Pip before 1.5 uses insecure DNS querying and authenticity checks which allows attackers to perform man-in-the-middle attacks.

EPSS 12.38% · 93.8th percentile

Risk Scores

EPSS Score
12.38%
93.8th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSpython-pip0, 1.4.1-2, 1.5.4-1
Ubuntu:16.04:LTSpython-pip0, 1.5.6-7ubuntu1, 1.5.6-7ubuntu2

Timeline

References

Open in Interactive Console →