CVE-2019-9948

CRITICAL severity · CVSS 9.1 · Path traversal

9.1CVSS CRITICAL

Summary

urllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for remote attackers to bypass protection mechanisms that blacklist file: URIs, as demonstrated by triggering a urllib.urlopen('local_file:///etc/passwd') call.

Impact & exploitability

Attack vectorNetwork

Attack complexityLow

Privileges requiredNone

User interactionNone

Confidentiality impactHigh

Integrity impactHigh

Availability impactNone

Exploit probability (EPSS)1%

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Affected products we track (1)

Python

Recommendation

Apply the vendor fix promptly. Open any affected product above for its exact safe version.

Additional information

NVD record
http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00092.htmlAdvisory
http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00050.htmlAdvisory
http://packetstormsecurity.com/files/154927/Slackware-Security-Advisory-python-Updates.htmlAdvisory
http://www.securityfocus.com/bid/107549Advisory
https://access.redhat.com/errata/RHSA-2019:1700Advisory
https://access.redhat.com/errata/RHSA-2019:2030Advisory
https://access.redhat.com/errata/RHSA-2019:3335Advisory
https://access.redhat.com/errata/RHSA-2019:3520Advisory