CVE-2018-1060
Fixed in a distro release EPSS 5%CVSS 4.3
python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in pop3lib's apop() method. An attacker could use this flaw to cause denial of service.
Products: python, fedoraproject fedora, canonical ubuntu_linux, redhat ansible_tower, redhat enterprise_linux_desktop, redhat enterprise_linux_server, redhat enterprise_linux_workstation, debian_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.10 | python2 | 2.7.15-r0 |
| Alpine 3.11 | python2 | 2.7.15-r0 |
| Alpine 3.12 | python2 | 2.7.15-r0 |
| Alpine 3.5 | python2 | 2.7.15-r0 |
| Alpine 3.5 | python3 | 3.5.6-r0 |
| Alpine 3.6 | python2 | 2.7.15-r0 |
| Alpine 3.6 | python3 | 3.6.5-r0 |
| Alpine 3.7 | python2 | 2.7.15-r0 |
| Alpine 3.7 | python3 | 3.6.5-r0 |
| Alpine 3.8 | python3 | 3.6.6-r0 |
| Alpine 3.9 | python2 | 2.7.15-r0 |
| Amazon Linux 2 | python | 2.7.16-1.amzn2.0.1 |
| Amazon Linux 2 | python-debug | 2.7.16-1.amzn2.0.1 |
| Amazon Linux 2 | python-devel | 2.7.16-1.amzn2.0.1 |
| Amazon Linux 2 | python-libs | 2.7.16-1.amzn2.0.1 |
| Amazon Linux 2 | python-test | 2.7.16-1.amzn2.0.1 |
| Amazon Linux 2 | python-tools | 2.7.16-1.amzn2.0.1 |
| Amazon Linux 2 | tkinter | 2.7.16-1.amzn2.0.1 |
| Debian 11 | python2.7 | 2.7.14-7 |
| Debian 8 | python2.7 | 2.7.9-2+deb8u2 |
| Debian 8 | python3.4 | 3.4.2-1+deb8u1 |
| Debian 9 | python2.7 | 2.7.13-2+deb9u3 |
| Debian 9 | python3.5 | 3.5.3-1+deb9u1 |
| Red Hat Enterprise Linux 7 | python | 0:2.7.5-76.el7 |
| Red Hat Enterprise Linux 7 | python-debug | 0:2.7.5-76.el7 |
| Red Hat Enterprise Linux 7 | python-debuginfo | 0:2.7.5-76.el7 |
| Red Hat Enterprise Linux 7 | python-devel | 0:2.7.5-76.el7 |
| Red Hat Enterprise Linux 7 | python-libs | 0:2.7.5-76.el7 |
| Red Hat Enterprise Linux 7 | python-test | 0:2.7.5-76.el7 |
| Red Hat Enterprise Linux 7 | python-tools | 0:2.7.5-76.el7 |
| Red Hat Enterprise Linux 7 | tkinter | 0:2.7.5-76.el7 |
| Red Hat rhel aus 7.4 | python | 0:2.7.5-63.el7_4 |
| Red Hat rhel aus 7.4 | python-debug | 0:2.7.5-63.el7_4 |
| Red Hat rhel aus 7.4 | python-debuginfo | 0:2.7.5-63.el7_4 |
| Red Hat rhel aus 7.4 | python-devel | 0:2.7.5-63.el7_4 |
| Red Hat rhel aus 7.4 | python-libs | 0:2.7.5-63.el7_4 |
| Red Hat rhel aus 7.4 | python-test | 0:2.7.5-63.el7_4 |
| Red Hat rhel aus 7.4 | python-tools | 0:2.7.5-63.el7_4 |
| Red Hat rhel aus 7.4 | tkinter | 0:2.7.5-63.el7_4 |
| Red Hat rhel e4s 7.4 | python | 0:2.7.5-63.el7_4 |
| Red Hat rhel e4s 7.4 | python-debug | 0:2.7.5-63.el7_4 |
| Red Hat rhel e4s 7.4 | python-debuginfo | 0:2.7.5-63.el7_4 |
| Red Hat rhel e4s 7.4 | python-devel | 0:2.7.5-63.el7_4 |
| Red Hat rhel e4s 7.4 | python-libs | 0:2.7.5-63.el7_4 |
| Red Hat rhel e4s 7.4 | python-test | 0:2.7.5-63.el7_4 |
| Red Hat rhel e4s 7.4 | python-tools | 0:2.7.5-63.el7_4 |
| Red Hat rhel e4s 7.4 | tkinter | 0:2.7.5-63.el7_4 |
| Red Hat rhel eus 7.5 | python | 0:2.7.5-74.el7_5 |
| Red Hat rhel eus 7.5 | python-debug | 0:2.7.5-74.el7_5 |
| Red Hat rhel eus 7.5 | python-debuginfo | 0:2.7.5-74.el7_5 |
| Red Hat rhel eus 7.5 | python-devel | 0:2.7.5-74.el7_5 |
| Red Hat rhel eus 7.5 | python-libs | 0:2.7.5-74.el7_5 |
| Red Hat rhel eus 7.5 | python-test | 0:2.7.5-74.el7_5 |
| Red Hat rhel eus 7.5 | python-tools | 0:2.7.5-74.el7_5 |
| Red Hat rhel eus 7.5 | tkinter | 0:2.7.5-74.el7_5 |
| Red Hat rhel software collections 3 | python27-python | 0:2.7.16-4.el6 |
| Red Hat rhel software collections 3 | python27-python | 0:2.7.16-4.el7 |
| Red Hat rhel software collections 3 | python27-python-debug | 0:2.7.16-4.el7 |
| Red Hat rhel software collections 3 | python27-python-debug | 0:2.7.16-4.el6 |
| Red Hat rhel software collections 3 | python27-python-debuginfo | 0:2.7.16-4.el6 |
| Red Hat rhel software collections 3 | python27-python-debuginfo | 0:2.7.16-4.el7 |
| Red Hat rhel software collections 3 | python27-python-devel | 0:2.7.16-4.el7 |
| Red Hat rhel software collections 3 | python27-python-devel | 0:2.7.16-4.el6 |
| Red Hat rhel software collections 3 | python27-python-jinja2 | 0:2.6-15.el7 |
| Red Hat rhel software collections 3 | python27-python-jinja2 | 0:2.6-12.el6 |
| Red Hat rhel software collections 3 | python27-python-libs | 0:2.7.16-4.el7 |
| Red Hat rhel software collections 3 | python27-python-libs | 0:2.7.16-4.el6 |
| Red Hat rhel software collections 3 | python27-python-test | 0:2.7.16-4.el6 |
| Red Hat rhel software collections 3 | python27-python-test | 0:2.7.16-4.el7 |
| Red Hat rhel software collections 3 | python27-python-tools | 0:2.7.16-4.el6 |
| Red Hat rhel software collections 3 | python27-python-tools | 0:2.7.16-4.el7 |
| Red Hat rhel software collections 3 | python27-tkinter | 0:2.7.16-4.el6 |
| Red Hat rhel software collections 3 | python27-tkinter | 0:2.7.16-4.el7 |
| Red Hat rhel software collections 3 | rh-python36-python | 0:3.6.9-2.el6 |
| Red Hat rhel software collections 3 | rh-python36-python | 0:3.6.9-2.el7 |
| Red Hat rhel software collections 3 | rh-python36-python-debug | 0:3.6.9-2.el6 |
| Red Hat rhel software collections 3 | rh-python36-python-debug | 0:3.6.9-2.el7 |
| Red Hat rhel software collections 3 | rh-python36-python-debuginfo | 0:3.6.9-2.el6 |
| Red Hat rhel software collections 3 | rh-python36-python-debuginfo | 0:3.6.9-2.el7 |
| Red Hat rhel software collections 3 | rh-python36-python-devel | 0:3.6.9-2.el7 |
| Red Hat rhel software collections 3 | rh-python36-python-devel | 0:3.6.9-2.el6 |
| Red Hat rhel software collections 3 | rh-python36-python-libs | 0:3.6.9-2.el6 |
| Red Hat rhel software collections 3 | rh-python36-python-libs | 0:3.6.9-2.el7 |
| Red Hat rhel software collections 3 | rh-python36-python-test | 0:3.6.9-2.el7 |
| Red Hat rhel software collections 3 | rh-python36-python-test | 0:3.6.9-2.el6 |
| Red Hat rhel software collections 3 | rh-python36-python-tkinter | 0:3.6.9-2.el7 |
| Red Hat rhel software collections 3 | rh-python36-python-tkinter | 0:3.6.9-2.el6 |
| Red Hat rhel software collections 3 | rh-python36-python-tools | 0:3.6.9-2.el7 |
| Red Hat rhel software collections 3 | rh-python36-python-tools | 0:3.6.9-2.el6 |
| Red Hat rhel tus 7.4 | python | 0:2.7.5-63.el7_4 |
| Red Hat rhel tus 7.4 | python-debug | 0:2.7.5-63.el7_4 |
| Red Hat rhel tus 7.4 | python-debuginfo | 0:2.7.5-63.el7_4 |
| Red Hat rhel tus 7.4 | python-devel | 0:2.7.5-63.el7_4 |
| Red Hat rhel tus 7.4 | python-libs | 0:2.7.5-63.el7_4 |
| Red Hat rhel tus 7.4 | python-test | 0:2.7.5-63.el7_4 |
| Red Hat rhel tus 7.4 | python-tools | 0:2.7.5-63.el7_4 |
| Red Hat rhel tus 7.4 | tkinter | 0:2.7.5-63.el7_4 |
| SUSE Enterprise Storage 5 | python | 2.7.13-28.16.1 |
| SUSE Linux Enterprise Desktop 12 SP3 | python | 2.7.13-28.16.1 |
| SUSE Linux Enterprise Desktop 12 SP3 | python-base | 2.7.13-28.16.1 |
| SUSE Linux Enterprise Desktop 12 SP3 | python3 | 3.4.6-25.16.1 |
| SUSE Linux Enterprise Desktop 12 SP3 | python3-base | 3.4.6-25.16.1 |
| SUSE Linux Enterprise Desktop 12 SP4 | python | 2.7.13-28.16.1 |
| SUSE Linux Enterprise Desktop 12 SP4 | python-base | 2.7.13-28.16.1 |
| SUSE Linux Enterprise Module for Basesystem 15 | python | 2.7.17-7.32.2 |
| SUSE Linux Enterprise Module for Basesystem 15 | python-base | 2.7.17-7.32.1 |
| SUSE Linux Enterprise Module for Basesystem 15 | python3 | 3.6.10-3.42.2 |
| SUSE Linux Enterprise Module for Basesystem 15 | python3-base | 3.6.10-3.42.2 |
| SUSE Linux Enterprise Module for Basesystem 15 SP1 | python | 2.7.17-7.32.2 |
| SUSE Linux Enterprise Module for Basesystem 15 SP1 | python-base | 2.7.17-7.32.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP1 | python3 | 3.6.10-3.42.2 |
| SUSE Linux Enterprise Module for Basesystem 15 SP1 | python3-base | 3.6.10-3.42.2 |
| SUSE Linux Enterprise Module for Desktop Applications 15 | python | 2.7.17-7.32.2 |
| SUSE Linux Enterprise Module for Desktop Applications 15 SP1 | python | 2.7.17-7.32.2 |
| SUSE Linux Enterprise Module for Development Tools 15 | python3-base | 3.6.10-3.42.2 |
| SUSE Linux Enterprise Module for Development Tools 15 SP1 | python3-base | 3.6.10-3.42.2 |
| SUSE Linux Enterprise Module for Python 2 15 SP1 | python | 2.7.17-7.32.2 |
| SUSE Linux Enterprise Module for Python 2 15 SP1 | python-base | 2.7.17-7.32.1 |
| SUSE Linux Enterprise Module for Web and Scripting 12 | python3 | 3.4.6-25.16.1 |
| SUSE Linux Enterprise Module for Web and Scripting 12 | python3-base | 3.4.6-25.16.1 |
| SUSE Linux Enterprise Point of Sale 11 SP3 | python | 2.6.9-40.15.1 |
| SUSE Linux Enterprise Point of Sale 11 SP3 | python-base | 2.6.9-40.15.1 |
| SUSE Linux Enterprise Point of Sale 11 SP3 | python-doc | 2.6-8.40.15.1 |
| SUSE Linux Enterprise Server 11 SP3-LTSS | python | 2.6.9-40.15.1 |
| SUSE Linux Enterprise Server 11 SP3-LTSS | python-base | 2.6.9-40.15.1 |
| SUSE Linux Enterprise Server 11 SP3-LTSS | python-doc | 2.6-8.40.15.1 |
| SUSE Linux Enterprise Server 11 SP3-TERADATA | python | 2.6.9-40.15.1 |
| SUSE Linux Enterprise Server 11 SP3-TERADATA | python-base | 2.6.9-40.15.1 |
| SUSE Linux Enterprise Server 11 SP3-TERADATA | python-doc | 2.6-8.40.15.1 |
| SUSE Linux Enterprise Server 11 SP4 | python | 2.6.9-40.15.1 |
| SUSE Linux Enterprise Server 11 SP4 | python-base | 2.6.9-40.15.1 |
| SUSE Linux Enterprise Server 11 SP4 | python-doc | 2.6-8.40.15.1 |
| SUSE Linux Enterprise Server 12 SP3 | python | 2.7.13-28.16.1 |
| SUSE Linux Enterprise Server 12 SP3 | python-base | 2.7.13-28.16.1 |
| SUSE Linux Enterprise Server 12 SP3 | python-doc | 2.7.13-28.16.1 |
| SUSE Linux Enterprise Server 12 SP3 | python3 | 3.4.6-25.16.1 |
| SUSE Linux Enterprise Server 12 SP3 | python3-base | 3.4.6-25.16.1 |
| SUSE Linux Enterprise Server 12 SP4 | python | 2.7.13-28.16.1 |
| SUSE Linux Enterprise Server 12 SP4 | python-base | 2.7.13-28.16.1 |
| SUSE Linux Enterprise Server 12 SP4 | python-doc | 2.7.13-28.16.1 |
| SUSE Linux Enterprise Server 12 SP5 | python36 | 3.6.10-4.3.5 |
| SUSE Linux Enterprise Server 12 SP5 | python36-base | 3.6.10-4.3.5 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | python | 2.6.9-40.15.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | python-base | 2.6.9-40.15.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | python-doc | 2.6-8.40.15.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | python | 2.7.13-28.16.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | python-base | 2.7.13-28.16.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | python-doc | 2.7.13-28.16.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | python3 | 3.4.6-25.16.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | python3-base | 3.4.6-25.16.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | python | 2.7.13-28.16.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | python-base | 2.7.13-28.16.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | python-doc | 2.7.13-28.16.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | python36 | 3.6.10-4.3.5 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | python36-base | 3.6.10-4.3.5 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | python | 2.6.9-40.15.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | python-base | 2.6.9-40.15.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | python-doc | 2.6-8.40.15.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP3 | python-base | 2.7.13-28.16.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP3 | python3-base | 3.4.6-25.16.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP4 | python-base | 2.7.13-28.16.1 |
| SUSE Linux Enterprise Workstation Extension 12 SP3 | python-base | 2.7.13-28.16.1 |
| SUSE Linux Enterprise Workstation Extension 12 SP4 | python-base | 2.7.13-28.16.1 |
| Ubuntu 14.04 LTS | python2.7 | 2.7.6-8ubuntu0.5 |
| Ubuntu 14.04 LTS | python3.4 | 3.4.3-1ubuntu1~14.04.7 |
| Ubuntu 16.04 LTS | python2.7 | 2.7.12-1ubuntu0~16.04.4 |
| Ubuntu 16.04 LTS | python3.5 | 3.5.2-2ubuntu0~16.04.5 |
| Ubuntu 18.04 LTS | python2.7 | 2.7.15~rc1-1ubuntu0.1 |
| Ubuntu 20.04 LTS | python3.8 | 3.8.10-0ubuntu1~20.04.10 |
| Ubuntu 22.04 LTS | python3.10 | 3.10.12-1~22.04.4 |
| Ubuntu Pro 14.04 LTS | python3.5 | 3.5.2-2ubuntu0~16.04.4~14.04.1+esm1 |
| Ubuntu Pro 16.04 LTS | python3.5 | 3.5.2-2ubuntu0~16.04.13+esm13 |
| Ubuntu Pro 18.04 LTS | python3.6 | 3.6.9-1~18.04ubuntu1.13+esm2 |
| Ubuntu Pro 18.04 LTS | python3.7 | 3.7.5-2ubuntu1~18.04.2+esm3 |
| Ubuntu Pro 18.04 LTS | python3.8 | 3.8.0-3ubuntu1~18.04.2+esm2 |
| Ubuntu Pro 20.04 LTS | python3.9 | 3.9.5-3ubuntu0~20.04.1+esm2 |
| Ubuntu Pro 22.04 LTS | python3.11 | 3.11.0~rc1-1~22.04.1~esm1 |
| openSUSE Leap 15.1 | python3 | 3.6.10-lp151.6.7.1 |
| openSUSE Leap 15.1 | python3-base | 3.6.10-lp151.6.7.1 |
| openSUSE Tumbleweed | python | 2.7.18-8.1 |
| openSUSE Tumbleweed | python36 | 3.6.15-1.1 |