CVE-2018-1061
Fixed in a distro release EPSS 5%CVSS 6.5
python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in the difflib.IS_LINE_JUNK method. An attacker could use this flaw to cause denial of service.
Products: python, debian_linux, redhat ansible_tower, redhat enterprise_linux_desktop, redhat enterprise_linux_server, redhat enterprise_linux_workstation, canonical ubuntu_linux, fedoraproject fedora
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.10 | python2 | 2.7.15-r0 |
| Alpine 3.11 | python2 | 2.7.15-r0 |
| Alpine 3.12 | python2 | 2.7.15-r0 |
| Alpine 3.5 | python2 | 2.7.15-r0 |
| Alpine 3.5 | python3 | 3.5.6-r0 |
| Alpine 3.6 | python2 | 2.7.15-r0 |
| Alpine 3.6 | python3 | 3.6.5-r0 |
| Alpine 3.7 | python2 | 2.7.15-r0 |
| Alpine 3.7 | python3 | 3.6.5-r0 |
| Alpine 3.8 | python3 | 3.6.6-r0 |
| Alpine 3.9 | python2 | 2.7.15-r0 |
| Amazon Linux 2 | python | 2.7.16-1.amzn2.0.1 |
| Amazon Linux 2 | python-debug | 2.7.16-1.amzn2.0.1 |
| Amazon Linux 2 | python-devel | 2.7.16-1.amzn2.0.1 |
| Amazon Linux 2 | python-libs | 2.7.16-1.amzn2.0.1 |
| Amazon Linux 2 | python-test | 2.7.16-1.amzn2.0.1 |
| Amazon Linux 2 | python-tools | 2.7.16-1.amzn2.0.1 |
| Amazon Linux 2 | tkinter | 2.7.16-1.amzn2.0.1 |
| Debian 11 | python2.7 | 2.7.14-7 |
| Debian 8 | python2.7 | 2.7.9-2+deb8u2 |
| Debian 8 | python3.4 | 3.4.2-1+deb8u1 |
| Debian 9 | python2.7 | 2.7.13-2+deb9u3 |
| Debian 9 | python3.5 | 3.5.3-1+deb9u1 |
| Red Hat Enterprise Linux 7 | python | 0:2.7.5-76.el7 |
| Red Hat Enterprise Linux 7 | python-debug | 0:2.7.5-76.el7 |
| Red Hat Enterprise Linux 7 | python-debuginfo | 0:2.7.5-76.el7 |
| Red Hat Enterprise Linux 7 | python-devel | 0:2.7.5-76.el7 |
| Red Hat Enterprise Linux 7 | python-libs | 0:2.7.5-76.el7 |
| Red Hat Enterprise Linux 7 | python-test | 0:2.7.5-76.el7 |
| Red Hat Enterprise Linux 7 | python-tools | 0:2.7.5-76.el7 |
| Red Hat Enterprise Linux 7 | tkinter | 0:2.7.5-76.el7 |
| Red Hat rhel aus 7.4 | python | 0:2.7.5-63.el7_4 |
| Red Hat rhel aus 7.4 | python-debug | 0:2.7.5-63.el7_4 |
| Red Hat rhel aus 7.4 | python-debuginfo | 0:2.7.5-63.el7_4 |
| Red Hat rhel aus 7.4 | python-devel | 0:2.7.5-63.el7_4 |
| Red Hat rhel aus 7.4 | python-libs | 0:2.7.5-63.el7_4 |
| Red Hat rhel aus 7.4 | python-test | 0:2.7.5-63.el7_4 |
| Red Hat rhel aus 7.4 | python-tools | 0:2.7.5-63.el7_4 |
| Red Hat rhel aus 7.4 | tkinter | 0:2.7.5-63.el7_4 |
| Red Hat rhel e4s 7.4 | python | 0:2.7.5-63.el7_4 |
| Red Hat rhel e4s 7.4 | python-debug | 0:2.7.5-63.el7_4 |
| Red Hat rhel e4s 7.4 | python-debuginfo | 0:2.7.5-63.el7_4 |
| Red Hat rhel e4s 7.4 | python-devel | 0:2.7.5-63.el7_4 |
| Red Hat rhel e4s 7.4 | python-libs | 0:2.7.5-63.el7_4 |
| Red Hat rhel e4s 7.4 | python-test | 0:2.7.5-63.el7_4 |
| Red Hat rhel e4s 7.4 | python-tools | 0:2.7.5-63.el7_4 |
| Red Hat rhel e4s 7.4 | tkinter | 0:2.7.5-63.el7_4 |
| Red Hat rhel eus 7.5 | python | 0:2.7.5-74.el7_5 |
| Red Hat rhel eus 7.5 | python-debug | 0:2.7.5-74.el7_5 |
| Red Hat rhel eus 7.5 | python-debuginfo | 0:2.7.5-74.el7_5 |
| Red Hat rhel eus 7.5 | python-devel | 0:2.7.5-74.el7_5 |
| Red Hat rhel eus 7.5 | python-libs | 0:2.7.5-74.el7_5 |
| Red Hat rhel eus 7.5 | python-test | 0:2.7.5-74.el7_5 |
| Red Hat rhel eus 7.5 | python-tools | 0:2.7.5-74.el7_5 |
| Red Hat rhel eus 7.5 | tkinter | 0:2.7.5-74.el7_5 |
| Red Hat rhel software collections 3 | python27-python | 0:2.7.16-4.el7 |
| Red Hat rhel software collections 3 | python27-python | 0:2.7.16-4.el6 |
| Red Hat rhel software collections 3 | python27-python-debug | 0:2.7.16-4.el6 |
| Red Hat rhel software collections 3 | python27-python-debug | 0:2.7.16-4.el7 |
| Red Hat rhel software collections 3 | python27-python-debuginfo | 0:2.7.16-4.el6 |
| Red Hat rhel software collections 3 | python27-python-debuginfo | 0:2.7.16-4.el7 |
| Red Hat rhel software collections 3 | python27-python-devel | 0:2.7.16-4.el6 |
| Red Hat rhel software collections 3 | python27-python-devel | 0:2.7.16-4.el7 |
| Red Hat rhel software collections 3 | python27-python-jinja2 | 0:2.6-12.el6 |
| Red Hat rhel software collections 3 | python27-python-jinja2 | 0:2.6-15.el7 |
| Red Hat rhel software collections 3 | python27-python-libs | 0:2.7.16-4.el6 |
| Red Hat rhel software collections 3 | python27-python-libs | 0:2.7.16-4.el7 |
| Red Hat rhel software collections 3 | python27-python-test | 0:2.7.16-4.el7 |
| Red Hat rhel software collections 3 | python27-python-test | 0:2.7.16-4.el6 |
| Red Hat rhel software collections 3 | python27-python-tools | 0:2.7.16-4.el6 |
| Red Hat rhel software collections 3 | python27-python-tools | 0:2.7.16-4.el7 |
| Red Hat rhel software collections 3 | python27-tkinter | 0:2.7.16-4.el6 |
| Red Hat rhel software collections 3 | python27-tkinter | 0:2.7.16-4.el7 |
| Red Hat rhel software collections 3 | rh-python36-python | 0:3.6.9-2.el6 |
| Red Hat rhel software collections 3 | rh-python36-python | 0:3.6.9-2.el7 |
| Red Hat rhel software collections 3 | rh-python36-python-debug | 0:3.6.9-2.el7 |
| Red Hat rhel software collections 3 | rh-python36-python-debug | 0:3.6.9-2.el6 |
| Red Hat rhel software collections 3 | rh-python36-python-debuginfo | 0:3.6.9-2.el6 |
| Red Hat rhel software collections 3 | rh-python36-python-debuginfo | 0:3.6.9-2.el7 |
| Red Hat rhel software collections 3 | rh-python36-python-devel | 0:3.6.9-2.el7 |
| Red Hat rhel software collections 3 | rh-python36-python-devel | 0:3.6.9-2.el6 |
| Red Hat rhel software collections 3 | rh-python36-python-libs | 0:3.6.9-2.el7 |
| Red Hat rhel software collections 3 | rh-python36-python-libs | 0:3.6.9-2.el6 |
| Red Hat rhel software collections 3 | rh-python36-python-test | 0:3.6.9-2.el7 |
| Red Hat rhel software collections 3 | rh-python36-python-test | 0:3.6.9-2.el6 |
| Red Hat rhel software collections 3 | rh-python36-python-tkinter | 0:3.6.9-2.el6 |
| Red Hat rhel software collections 3 | rh-python36-python-tkinter | 0:3.6.9-2.el7 |
| Red Hat rhel software collections 3 | rh-python36-python-tools | 0:3.6.9-2.el7 |
| Red Hat rhel software collections 3 | rh-python36-python-tools | 0:3.6.9-2.el6 |
| Red Hat rhel tus 7.4 | python | 0:2.7.5-63.el7_4 |
| Red Hat rhel tus 7.4 | python-debug | 0:2.7.5-63.el7_4 |
| Red Hat rhel tus 7.4 | python-debuginfo | 0:2.7.5-63.el7_4 |
| Red Hat rhel tus 7.4 | python-devel | 0:2.7.5-63.el7_4 |
| Red Hat rhel tus 7.4 | python-libs | 0:2.7.5-63.el7_4 |
| Red Hat rhel tus 7.4 | python-test | 0:2.7.5-63.el7_4 |
| Red Hat rhel tus 7.4 | python-tools | 0:2.7.5-63.el7_4 |
| Red Hat rhel tus 7.4 | tkinter | 0:2.7.5-63.el7_4 |
| SUSE Enterprise Storage 5 | python | 2.7.13-28.16.1 |
| SUSE Linux Enterprise Desktop 12 SP3 | python | 2.7.13-28.16.1 |
| SUSE Linux Enterprise Desktop 12 SP3 | python-base | 2.7.13-28.16.1 |
| SUSE Linux Enterprise Desktop 12 SP3 | python3 | 3.4.6-25.16.1 |
| SUSE Linux Enterprise Desktop 12 SP3 | python3-base | 3.4.6-25.16.1 |
| SUSE Linux Enterprise Desktop 12 SP4 | python | 2.7.13-28.16.1 |
| SUSE Linux Enterprise Desktop 12 SP4 | python-base | 2.7.13-28.16.1 |
| SUSE Linux Enterprise Module for Basesystem 15 | python | 2.7.17-7.32.2 |
| SUSE Linux Enterprise Module for Basesystem 15 | python-base | 2.7.17-7.32.1 |
| SUSE Linux Enterprise Module for Basesystem 15 | python3 | 3.6.10-3.42.2 |
| SUSE Linux Enterprise Module for Basesystem 15 | python3-base | 3.6.10-3.42.2 |
| SUSE Linux Enterprise Module for Basesystem 15 SP1 | python | 2.7.17-7.32.2 |
| SUSE Linux Enterprise Module for Basesystem 15 SP1 | python-base | 2.7.17-7.32.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP1 | python3 | 3.6.10-3.42.2 |
| SUSE Linux Enterprise Module for Basesystem 15 SP1 | python3-base | 3.6.10-3.42.2 |
| SUSE Linux Enterprise Module for Desktop Applications 15 | python | 2.7.17-7.32.2 |
| SUSE Linux Enterprise Module for Desktop Applications 15 SP1 | python | 2.7.17-7.32.2 |
| SUSE Linux Enterprise Module for Development Tools 15 | python3-base | 3.6.10-3.42.2 |
| SUSE Linux Enterprise Module for Development Tools 15 SP1 | python3-base | 3.6.10-3.42.2 |
| SUSE Linux Enterprise Module for Python 2 15 SP1 | python | 2.7.17-7.32.2 |
| SUSE Linux Enterprise Module for Python 2 15 SP1 | python-base | 2.7.17-7.32.1 |
| SUSE Linux Enterprise Module for Web and Scripting 12 | python3 | 3.4.6-25.16.1 |
| SUSE Linux Enterprise Module for Web and Scripting 12 | python3-base | 3.4.6-25.16.1 |
| SUSE Linux Enterprise Point of Sale 11 SP3 | python | 2.6.9-40.15.1 |
| SUSE Linux Enterprise Point of Sale 11 SP3 | python-base | 2.6.9-40.15.1 |
| SUSE Linux Enterprise Point of Sale 11 SP3 | python-doc | 2.6-8.40.15.1 |
| SUSE Linux Enterprise Server 11 SP3-LTSS | python | 2.6.9-40.15.1 |
| SUSE Linux Enterprise Server 11 SP3-LTSS | python-base | 2.6.9-40.15.1 |
| SUSE Linux Enterprise Server 11 SP3-LTSS | python-doc | 2.6-8.40.15.1 |
| SUSE Linux Enterprise Server 11 SP3-TERADATA | python | 2.6.9-40.15.1 |
| SUSE Linux Enterprise Server 11 SP3-TERADATA | python-base | 2.6.9-40.15.1 |
| SUSE Linux Enterprise Server 11 SP3-TERADATA | python-doc | 2.6-8.40.15.1 |
| SUSE Linux Enterprise Server 11 SP4 | python | 2.6.9-40.15.1 |
| SUSE Linux Enterprise Server 11 SP4 | python-base | 2.6.9-40.15.1 |
| SUSE Linux Enterprise Server 11 SP4 | python-doc | 2.6-8.40.15.1 |
| SUSE Linux Enterprise Server 12 SP3 | python | 2.7.13-28.16.1 |
| SUSE Linux Enterprise Server 12 SP3 | python-base | 2.7.13-28.16.1 |
| SUSE Linux Enterprise Server 12 SP3 | python-doc | 2.7.13-28.16.1 |
| SUSE Linux Enterprise Server 12 SP3 | python3 | 3.4.6-25.16.1 |
| SUSE Linux Enterprise Server 12 SP3 | python3-base | 3.4.6-25.16.1 |
| SUSE Linux Enterprise Server 12 SP4 | python | 2.7.13-28.16.1 |
| SUSE Linux Enterprise Server 12 SP4 | python-base | 2.7.13-28.16.1 |
| SUSE Linux Enterprise Server 12 SP4 | python-doc | 2.7.13-28.16.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | python | 2.6.9-40.15.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | python-base | 2.6.9-40.15.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | python-doc | 2.6-8.40.15.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | python | 2.7.13-28.16.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | python-base | 2.7.13-28.16.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | python-doc | 2.7.13-28.16.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | python3 | 3.4.6-25.16.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | python3-base | 3.4.6-25.16.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | python | 2.7.13-28.16.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | python-base | 2.7.13-28.16.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | python-doc | 2.7.13-28.16.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | python | 2.6.9-40.15.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | python-base | 2.6.9-40.15.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | python-doc | 2.6-8.40.15.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP3 | python-base | 2.7.13-28.16.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP3 | python3-base | 3.4.6-25.16.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP4 | python-base | 2.7.13-28.16.1 |
| SUSE Linux Enterprise Workstation Extension 12 SP3 | python-base | 2.7.13-28.16.1 |
| SUSE Linux Enterprise Workstation Extension 12 SP4 | python-base | 2.7.13-28.16.1 |
| Ubuntu 14.04 LTS | python2.7 | 2.7.6-8ubuntu0.5 |
| Ubuntu 14.04 LTS | python3.4 | 3.4.3-1ubuntu1~14.04.7 |
| Ubuntu 16.04 LTS | python2.7 | 2.7.12-1ubuntu0~16.04.4 |
| Ubuntu 16.04 LTS | python3.5 | 3.5.2-2ubuntu0~16.04.5 |
| Ubuntu 18.04 LTS | python2.7 | 2.7.15~rc1-1ubuntu0.1 |
| Ubuntu 20.04 LTS | python3.8 | 3.8.10-0ubuntu1~20.04.10 |
| Ubuntu 22.04 LTS | python3.10 | 3.10.12-1~22.04.4 |
| Ubuntu Pro 14.04 LTS | python3.5 | 3.5.2-2ubuntu0~16.04.4~14.04.1+esm1 |
| Ubuntu Pro 16.04 LTS | python3.5 | 3.5.2-2ubuntu0~16.04.13+esm13 |
| Ubuntu Pro 18.04 LTS | python3.6 | 3.6.9-1~18.04ubuntu1.13+esm2 |
| Ubuntu Pro 18.04 LTS | python3.7 | 3.7.5-2ubuntu1~18.04.2+esm3 |
| Ubuntu Pro 18.04 LTS | python3.8 | 3.8.0-3ubuntu1~18.04.2+esm2 |
| Ubuntu Pro 20.04 LTS | python3.9 | 3.9.5-3ubuntu0~20.04.1+esm2 |
| Ubuntu Pro 22.04 LTS | python3.11 | 3.11.0~rc1-1~22.04.1~esm1 |
| openSUSE Leap 15.1 | python3 | 3.6.10-lp151.6.7.1 |
| openSUSE Leap 15.1 | python3-base | 3.6.10-lp151.6.7.1 |
| openSUSE Tumbleweed | python | 2.7.18-8.1 |
| openSUSE Tumbleweed | python36 | 3.6.15-1.1 |