CVE-2019-10160
Fixed in a distro release EPSS 5%CVSS 9.8
A security regression of CVE-2019-9636 was discovered in python since commit d537ab0ff9767ef024f26246899728f0116b1ec3 affecting versions 2.7, 3.5, 3.6, 3.7 and from v3.8.0a4 through v3.8.0b1, which still allows an attacker to exploit CVE-2019-9636 by abusing the user and password parts of a URL. When an application parses user-supplied URLs to store cookies, authentication credentials, or other kind of information, it is possible for an attacker to provide specially crafted URLs to make the application locate host-related information (e.g. cookies, authentication data) and send them to a different host than where it should, unlike if the URLs had been correctly parsed. The result of an attack may vary based on the application.
Products: python, Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP, Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP, Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 11 | python2.7 | 2.7.16-3 |
| Debian 9 | python3.5 | 3.5.3-1+deb9u2 |
| Red Hat Enterprise Linux 7 | imgbased | 0:1.1.9-0.1.el7ev |
| Red Hat Enterprise Linux 7 | ovirt-node-ng | 0:4.3.5-0.20190717.0.el7ev |
| Red Hat Enterprise Linux 7 | ovirt-node-ng-nodectl | 0:4.3.5-0.20190717.0.el7ev |
| Red Hat Enterprise Linux 7 | python | 0:2.7.5-80.el7_6 |
| Red Hat Enterprise Linux 7 | python-debug | 0:2.7.5-80.el7_6 |
| Red Hat Enterprise Linux 7 | python-debuginfo | 0:2.7.5-80.el7_6 |
| Red Hat Enterprise Linux 7 | python-devel | 0:2.7.5-80.el7_6 |
| Red Hat Enterprise Linux 7 | python-imgbased | 0:1.1.9-0.1.el7ev |
| Red Hat Enterprise Linux 7 | python-libs | 0:2.7.5-80.el7_6 |
| Red Hat Enterprise Linux 7 | python-test | 0:2.7.5-80.el7_6 |
| Red Hat Enterprise Linux 7 | python-tools | 0:2.7.5-80.el7_6 |
| Red Hat Enterprise Linux 7 | python2-ovirt-node-ng-nodectl | 0:4.3.5-0.20190717.0.el7ev |
| Red Hat Enterprise Linux 7 | redhat-release-virtualization-host | 0:4.3.5-2.el7ev |
| Red Hat Enterprise Linux 7 | redhat-virtualization-host | 0:4.3.5-20190722.0.el7_7 |
| Red Hat Enterprise Linux 7 | redhat-virtualization-host-image-update | 0:4.3.5-20190722.0.el7_7 |
| Red Hat Enterprise Linux 7 | redhat-virtualization-host-image-update-placeholder | 0:4.3.5-2.el7ev |
| Red Hat Enterprise Linux 7 | tkinter | 0:2.7.5-80.el7_6 |
| Red Hat rhel software collections 3 | python27-python | 0:2.7.16-6.el7 |
| Red Hat rhel software collections 3 | python27-python | 0:2.7.16-6.el6 |
| Red Hat rhel software collections 3 | python27-python-debug | 0:2.7.16-6.el6 |
| Red Hat rhel software collections 3 | python27-python-debug | 0:2.7.16-6.el7 |
| Red Hat rhel software collections 3 | python27-python-debuginfo | 0:2.7.16-6.el6 |
| Red Hat rhel software collections 3 | python27-python-debuginfo | 0:2.7.16-6.el7 |
| Red Hat rhel software collections 3 | python27-python-devel | 0:2.7.16-6.el6 |
| Red Hat rhel software collections 3 | python27-python-devel | 0:2.7.16-6.el7 |
| Red Hat rhel software collections 3 | python27-python-libs | 0:2.7.16-6.el6 |
| Red Hat rhel software collections 3 | python27-python-libs | 0:2.7.16-6.el7 |
| Red Hat rhel software collections 3 | python27-python-test | 0:2.7.16-6.el6 |
| Red Hat rhel software collections 3 | python27-python-test | 0:2.7.16-6.el7 |
| Red Hat rhel software collections 3 | python27-python-tools | 0:2.7.16-6.el6 |
| Red Hat rhel software collections 3 | python27-python-tools | 0:2.7.16-6.el7 |
| Red Hat rhel software collections 3 | python27-tkinter | 0:2.7.16-6.el7 |
| Red Hat rhel software collections 3 | python27-tkinter | 0:2.7.16-6.el6 |
| SUSE Enterprise Storage 4 | python | 2.7.13-28.31.1 |
| SUSE Enterprise Storage 4 | python-base | 2.7.13-28.31.1 |
| SUSE Enterprise Storage 4 | python-doc | 2.7.13-28.31.2 |
| SUSE Enterprise Storage 4 | python3 | 3.4.6-25.29.1 |
| SUSE Enterprise Storage 4 | python3-base | 3.4.6-25.29.1 |
| SUSE Enterprise Storage 5 | python | 2.7.13-28.31.1 |
| SUSE Enterprise Storage 5 | python-base | 2.7.13-28.31.1 |
| SUSE Enterprise Storage 5 | python-doc | 2.7.13-28.31.2 |
| SUSE Enterprise Storage 5 | python3 | 3.4.6-25.29.1 |
| SUSE Enterprise Storage 5 | python3-base | 3.4.6-25.29.1 |
| SUSE HPE Helion OpenStack 8 | python | 2.7.13-28.31.1 |
| SUSE HPE Helion OpenStack 8 | python-base | 2.7.13-28.31.1 |
| SUSE HPE Helion OpenStack 8 | python-doc | 2.7.13-28.31.2 |
| SUSE HPE Helion OpenStack 8 | python3 | 3.4.6-25.29.1 |
| SUSE HPE Helion OpenStack 8 | python3-base | 3.4.6-25.29.1 |
| SUSE Linux Enterprise Desktop 12 SP4 | python | 2.7.13-28.31.1 |
| SUSE Linux Enterprise Desktop 12 SP4 | python-base | 2.7.13-28.31.1 |
| SUSE Linux Enterprise Desktop 12 SP4 | python3 | 3.4.6-25.29.1 |
| SUSE Linux Enterprise Desktop 12 SP4 | python3-base | 3.4.6-25.29.1 |
| SUSE Linux Enterprise Module for Basesystem 15 | python | 2.7.14-7.14.2 |
| SUSE Linux Enterprise Module for Basesystem 15 | python | 2.7.17-7.32.2 |
| SUSE Linux Enterprise Module for Basesystem 15 | python-base | 2.7.14-7.14.2 |
| SUSE Linux Enterprise Module for Basesystem 15 | python-base | 2.7.17-7.32.1 |
| SUSE Linux Enterprise Module for Basesystem 15 | python3 | 3.6.8-3.23.1 |
| SUSE Linux Enterprise Module for Basesystem 15 | python3 | 3.6.10-3.42.2 |
| SUSE Linux Enterprise Module for Basesystem 15 | python3-base | 3.6.10-3.42.2 |
| SUSE Linux Enterprise Module for Basesystem 15 | python3-base | 3.6.8-3.23.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP1 | python | 2.7.17-7.32.2 |
| SUSE Linux Enterprise Module for Basesystem 15 SP1 | python | 2.7.14-7.14.2 |
| SUSE Linux Enterprise Module for Basesystem 15 SP1 | python-base | 2.7.14-7.14.2 |
| SUSE Linux Enterprise Module for Basesystem 15 SP1 | python-base | 2.7.17-7.32.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP1 | python3 | 3.6.10-3.42.2 |
| SUSE Linux Enterprise Module for Basesystem 15 SP1 | python3 | 3.6.8-3.23.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP1 | python3-base | 3.6.10-3.42.2 |
| SUSE Linux Enterprise Module for Basesystem 15 SP1 | python3-base | 3.6.8-3.23.1 |
| SUSE Linux Enterprise Module for Desktop Applications 15 | python | 2.7.14-7.14.2 |
| SUSE Linux Enterprise Module for Desktop Applications 15 | python | 2.7.17-7.32.2 |
| SUSE Linux Enterprise Module for Desktop Applications 15 SP1 | python | 2.7.17-7.32.2 |
| SUSE Linux Enterprise Module for Desktop Applications 15 SP1 | python | 2.7.14-7.14.2 |
| SUSE Linux Enterprise Module for Development Tools 15 | python3-base | 3.6.8-3.23.1 |
| SUSE Linux Enterprise Module for Development Tools 15 | python3-base | 3.6.10-3.42.2 |
| SUSE Linux Enterprise Module for Development Tools 15 SP1 | python3-base | 3.6.10-3.42.2 |
| SUSE Linux Enterprise Module for Development Tools 15 SP1 | python3-base | 3.6.8-3.23.1 |
| SUSE Linux Enterprise Module for Python 2 15 SP1 | python | 2.7.14-7.14.2 |
| SUSE Linux Enterprise Module for Python 2 15 SP1 | python | 2.7.17-7.32.2 |
| SUSE Linux Enterprise Module for Python 2 15 SP1 | python-base | 2.7.14-7.14.2 |
| SUSE Linux Enterprise Module for Python 2 15 SP1 | python-base | 2.7.17-7.32.1 |
| SUSE Linux Enterprise Module for Web and Scripting 12 | python3 | 3.4.6-25.29.1 |
| SUSE Linux Enterprise Module for Web and Scripting 12 | python3-base | 3.4.6-25.29.1 |
| SUSE Linux Enterprise Point of Sale 11 SP3 | python | 2.6.9-40.29.1 |
| SUSE Linux Enterprise Point of Sale 11 SP3 | python-base | 2.6.9-40.29.1 |
| SUSE Linux Enterprise Point of Sale 11 SP3 | python-doc | 2.6-8.40.29.1 |
| SUSE Linux Enterprise Server 11 SP4-LTSS | MozillaFirefox | 68.2.0-78.51.4 |
| SUSE Linux Enterprise Server 11 SP4-LTSS | MozillaFirefox-branding-SLED | 68-21.9.8 |
| SUSE Linux Enterprise Server 11 SP4-LTSS | firefox-atk | 2.26.1-2.8.4 |
| SUSE Linux Enterprise Server 11 SP4-LTSS | firefox-cairo | 1.15.10-2.13.4 |
| SUSE Linux Enterprise Server 11 SP4-LTSS | firefox-gdk-pixbuf | 2.36.11-2.8.4 |
| SUSE Linux Enterprise Server 11 SP4-LTSS | firefox-glib2 | 2.54.3-2.14.7 |
| SUSE Linux Enterprise Server 11 SP4-LTSS | firefox-gtk3 | 3.10.9-2.15.3 |
| SUSE Linux Enterprise Server 11 SP4-LTSS | firefox-harfbuzz | 1.7.5-2.7.4 |
| SUSE Linux Enterprise Server 11 SP4-LTSS | firefox-libffi | 3.2.1.git259-2.3.3 |
| SUSE Linux Enterprise Server 11 SP4-LTSS | firefox-libffi-gcc5 | 5.3.1+r233831-14.1 |
| SUSE Linux Enterprise Server 11 SP4-LTSS | firefox-pango | 1.40.14-2.7.4 |
| SUSE Linux Enterprise Server 11 SP4-LTSS | mozilla-nspr | 4.21-29.6.1 |
| SUSE Linux Enterprise Server 11 SP4-LTSS | mozilla-nss | 3.45-38.9.3 |
| SUSE Linux Enterprise Server 11 SP4-LTSS | python | 2.6.9-40.29.1 |
| SUSE Linux Enterprise Server 11 SP4-LTSS | python-base | 2.6.9-40.29.1 |
| SUSE Linux Enterprise Server 11 SP4-LTSS | python-doc | 2.6-8.40.29.1 |
| SUSE Linux Enterprise Server 12 SP1-LTSS | python | 2.7.13-28.31.1 |
| SUSE Linux Enterprise Server 12 SP1-LTSS | python-base | 2.7.13-28.31.1 |
| SUSE Linux Enterprise Server 12 SP1-LTSS | python-doc | 2.7.13-28.31.2 |
| SUSE Linux Enterprise Server 12 SP1-LTSS | python3 | 3.4.6-25.29.1 |
| SUSE Linux Enterprise Server 12 SP1-LTSS | python3-base | 3.4.6-25.29.1 |
| SUSE Linux Enterprise Server 12 SP2-BCL | python | 2.7.13-28.31.1 |
| SUSE Linux Enterprise Server 12 SP2-BCL | python-base | 2.7.13-28.31.1 |
| SUSE Linux Enterprise Server 12 SP2-BCL | python-doc | 2.7.13-28.31.2 |
| SUSE Linux Enterprise Server 12 SP2-BCL | python3 | 3.4.6-25.29.1 |
| SUSE Linux Enterprise Server 12 SP2-BCL | python3-base | 3.4.6-25.29.1 |
| SUSE Linux Enterprise Server 12 SP2-LTSS | python | 2.7.13-28.31.1 |
| SUSE Linux Enterprise Server 12 SP2-LTSS | python-base | 2.7.13-28.31.1 |
| SUSE Linux Enterprise Server 12 SP2-LTSS | python-doc | 2.7.13-28.31.2 |
| SUSE Linux Enterprise Server 12 SP2-LTSS | python3 | 3.4.6-25.29.1 |
| SUSE Linux Enterprise Server 12 SP2-LTSS | python3-base | 3.4.6-25.29.1 |
| SUSE Linux Enterprise Server 12 SP3-BCL | python | 2.7.13-28.31.1 |
| SUSE Linux Enterprise Server 12 SP3-BCL | python-base | 2.7.13-28.31.1 |
| SUSE Linux Enterprise Server 12 SP3-BCL | python-doc | 2.7.13-28.31.2 |
| SUSE Linux Enterprise Server 12 SP3-BCL | python3 | 3.4.6-25.29.1 |
| SUSE Linux Enterprise Server 12 SP3-BCL | python3-base | 3.4.6-25.29.1 |
| SUSE Linux Enterprise Server 12 SP3-LTSS | python | 2.7.13-28.31.1 |
| SUSE Linux Enterprise Server 12 SP3-LTSS | python-base | 2.7.13-28.31.1 |
| SUSE Linux Enterprise Server 12 SP3-LTSS | python-doc | 2.7.13-28.31.2 |
| SUSE Linux Enterprise Server 12 SP3-LTSS | python3 | 3.4.6-25.29.1 |
| SUSE Linux Enterprise Server 12 SP3-LTSS | python3-base | 3.4.6-25.29.1 |
| SUSE Linux Enterprise Server 12 SP4 | python | 2.7.13-28.31.1 |
| SUSE Linux Enterprise Server 12 SP4 | python-base | 2.7.13-28.31.1 |
| SUSE Linux Enterprise Server 12 SP4 | python-doc | 2.7.13-28.31.2 |
| SUSE Linux Enterprise Server 12 SP4 | python3 | 3.4.6-25.29.1 |
| SUSE Linux Enterprise Server 12 SP4 | python3-base | 3.4.6-25.29.1 |
| SUSE Linux Enterprise Server 12 SP5 | python36 | 3.6.10-4.3.5 |
| SUSE Linux Enterprise Server 12 SP5 | python36-base | 3.6.10-4.3.5 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | python | 2.7.13-28.31.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | python-base | 2.7.13-28.31.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | python-doc | 2.7.13-28.31.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | python3 | 3.4.6-25.29.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | python3-base | 3.4.6-25.29.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | python | 2.7.13-28.31.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | python-base | 2.7.13-28.31.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | python-doc | 2.7.13-28.31.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | python3 | 3.4.6-25.29.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | python3-base | 3.4.6-25.29.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | python | 2.7.13-28.31.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | python-base | 2.7.13-28.31.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | python-doc | 2.7.13-28.31.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | python3 | 3.4.6-25.29.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | python3-base | 3.4.6-25.29.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | python | 2.7.13-28.31.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | python-base | 2.7.13-28.31.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | python-doc | 2.7.13-28.31.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | python3 | 3.4.6-25.29.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | python3-base | 3.4.6-25.29.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | python36 | 3.6.10-4.3.5 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | python36-base | 3.6.10-4.3.5 |
| SUSE Linux Enterprise Software Development Kit 12 SP4 | python-base | 2.7.13-28.31.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP4 | python3 | 3.4.6-25.29.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP4 | python3-base | 3.4.6-25.29.1 |
| SUSE Linux Enterprise Workstation Extension 12 SP4 | python-base | 2.7.13-28.31.1 |
| SUSE OpenStack Cloud 7 | python | 2.7.13-28.31.1 |
| SUSE OpenStack Cloud 7 | python-base | 2.7.13-28.31.1 |
| SUSE OpenStack Cloud 7 | python-doc | 2.7.13-28.31.2 |
| SUSE OpenStack Cloud 7 | python3 | 3.4.6-25.29.1 |
| SUSE OpenStack Cloud 7 | python3-base | 3.4.6-25.29.1 |
| SUSE OpenStack Cloud 8 | python | 2.7.13-28.31.1 |
| SUSE OpenStack Cloud 8 | python-base | 2.7.13-28.31.1 |
| SUSE OpenStack Cloud 8 | python-doc | 2.7.13-28.31.2 |
| SUSE OpenStack Cloud 8 | python3 | 3.4.6-25.29.1 |
| SUSE OpenStack Cloud 8 | python3-base | 3.4.6-25.29.1 |
| SUSE OpenStack Cloud Crowbar 8 | python | 2.7.13-28.31.1 |
| SUSE OpenStack Cloud Crowbar 8 | python-base | 2.7.13-28.31.1 |
| SUSE OpenStack Cloud Crowbar 8 | python-doc | 2.7.13-28.31.2 |
| SUSE OpenStack Cloud Crowbar 8 | python3 | 3.4.6-25.29.1 |
| SUSE OpenStack Cloud Crowbar 8 | python3-base | 3.4.6-25.29.1 |
| Ubuntu 16.04 LTS | python2.7 | 2.7.12-1ubuntu0~16.04.8 |
| Ubuntu 16.04 LTS | python3.5 | 3.5.2-2ubuntu0~16.04.8 |
| Ubuntu 18.04 LTS | python2.7 | 2.7.15-4ubuntu4~18.04.1 |
| Ubuntu 18.04 LTS | python3.6 | 3.6.8-1~18.04.2 |
| Ubuntu 20.04 LTS | python3.8 | 3.8.10-0ubuntu1~20.04.10 |
| Ubuntu 22.04 LTS | python3.10 | 3.10.12-1~22.04.4 |
| Ubuntu Pro 14.04 LTS | python2.7 | 2.7.6-8ubuntu0.6+esm2 |
| Ubuntu Pro 14.04 LTS | python3.4 | 3.4.3-1ubuntu1~14.04.7+esm2 |
| Ubuntu Pro 14.04 LTS | python3.5 | 3.5.2-2ubuntu0~16.04.4~14.04.1+esm1 |
| Ubuntu Pro 16.04 LTS | python3.5 | 3.5.2-2ubuntu0~16.04.13+esm13 |
| Ubuntu Pro 18.04 LTS | python3.6 | 3.6.9-1~18.04ubuntu1.13+esm2 |
| Ubuntu Pro 18.04 LTS | python3.7 | 3.7.5-2ubuntu1~18.04.2+esm3 |
| Ubuntu Pro 18.04 LTS | python3.8 | 3.8.0-3ubuntu1~18.04.2+esm2 |
| Ubuntu Pro 20.04 LTS | python3.9 | 3.9.5-3ubuntu0~20.04.1+esm2 |
| Ubuntu Pro 22.04 LTS | python3.11 | 3.11.0~rc1-1~22.04.1~esm1 |
| openSUSE Leap 15.0 | python | 2.7.14-lp151.10.3.1 |
| openSUSE Leap 15.0 | python-base | 2.7.14-lp151.10.3.1 |
| openSUSE Leap 15.0 | python-doc | 2.7.14-lp151.10.3.1 |
| openSUSE Leap 15.1 | python | 2.7.14-lp151.10.3.1 |
| openSUSE Leap 15.1 | python-base | 2.7.14-lp151.10.3.1 |
| openSUSE Leap 15.1 | python-doc | 2.7.14-lp151.10.3.1 |
| openSUSE Leap 15.1 | python3 | 3.6.10-lp151.6.7.1 |
| openSUSE Leap 15.1 | python3-base | 3.6.10-lp151.6.7.1 |
| openSUSE Tumbleweed | python | 2.7.18-8.1 |
| openSUSE Tumbleweed | python36 | 3.6.15-1.1 |