CVE-2019-9948

Advisory lineage Upstream: 0 Downstream: 26
Modified
Published: 23 Mar 2019, 17:07
Last modified:04 Aug 2024, 22:10

Vulnerability Summary

Overall Risk (default)
high
70/100
CVSS Score
9.1 CRITICAL
v3.1 (nvd)
EPSS Score
0.92% LOW
1% probability 0.00%
KEV
Not listed
Ransomware
No reports
Public exploits
1 found
Dark Web
Not detected

Timeline

23 Mar 2019, 17:07
Published
Vulnerability first disclosed
04 Aug 2024, 22:10
Last Modified
Vulnerability information updated

Description

urllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for remote attackers to bypass protection mechanisms that blacklist file: URIs, as demonstrated by triggering a urllib.urlopen('local_file:///etc/passwd') call.

CVSS Metrics

  • v3.1•CRITICAL•Score: 9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
  • v2.0•MEDIUM•Score: 6.4AV:N/AC:L/Au:N/C:P/I:P/A:N

EPSS Trends

Current EPSS score: 0.92%• Percentile: 76%

Techniques & Countermeasures

  • CWE-22•Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

    The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Affected Systems

  • canonical•ubuntu_linux

    12.04 | 14.04 | 16.04 | 18.04 | 19.04

  • debian•debian_linux

    8.0 | 9.0

  • fedoraproject•fedora

    29 | 30

  • opensuse•leap

    15.0 | 42.3

  • python•python

    ≥ 2.0, < 2.7.17 | ≥ 3.5.0, < 3.5.8 | ≥ 3.6.0, < 3.6.9 | ≥ 3.7.0, < 3.7.4

  • redhat•enterprise_linux_desktop

    7.0 | 8.0

  • redhat•enterprise_linux_eus

    8.1 | 8.2 | 8.4 | 8.6

  • redhat•enterprise_linux_server

    7.0 | 8.0

  • redhat•enterprise_linux_server_eus

    8.4

  • redhat•enterprise_linux_tus

    8.2 | 8.4 | 8.6

  • redhat•enterprise_linux_workstation

    7.0 | 8.0

References (22)