9.8

CVE-2020-27619: fedoraproject fedora

Modified
AliasesMGASA-2020-0477MGASA-2021-0327SUSE-SU-2021:1621-1
Published 22-10-2020Last modified 08-10-2026

Vulnerability summary

CVE-2020-27619 is a critical (CVSS 9.8) vulnerability in fedoraproject fedora. EPSS estimates a 8.33% chance of exploitation in the next 30 days, higher than 94.9% of scored vulnerabilities.

Priority
Prioritisesevere

Severe, CVSS 9.8 (NVD); no exploitation reported by the 5 checked sources; EPSS 8% (FIRST, 03-11-2026)

Source freshness unavailable

How is this decided?
CVSS score
9.8/10
010
Critical · v3.1 (NVD)
EPSS score
8.33%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 13 · Related 8
OPENSUSE-SU-2020:2332-1OPENSUSE-SU-2020:2333-1OPENSUSE-SU-2024:11284-1RHSA-2021:1633RHSA-2021:3252RHSA-2021:3254

Timeline

  1. 22-10-2020
    PublishedVulnerability first disclosed.
  2. 08-10-2026
    Last modifiedVulnerability information updated.

Description

In Python 3 through 3.9.0, the Lib/test/multibytecodec_support.py CJK codec tests call eval() on content retrieved via HTTP.

CVSS metrics

4 scores · 3 sources · 2 versions

EPSS trend

Probability

8.33%

Chance of exploitation in the next 30 days

Percentile

95%

Versus all other CVEs

30-day change

No change 0.00 pp

From 8.33% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs
CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Version check

Known conditions: network-reachable, no authentication, no user interaction (CVSS vector). Other conditions: not stated in public data.

Suse30 products
  • python3-base&distro=HPE Helion OpenStack 8< 3.4.10-25.71.1
  • python3-base&distro=SUSE Linux Enterprise Module for Web and Scripting 12< 3.4.10-25.71.1
  • python3-base&distro=SUSE Linux Enterprise Server 12 SP2-BCL< 3.4.10-25.71.1
  • python3-base&distro=SUSE Linux Enterprise Server 12 SP3-BCL< 3.4.10-25.71.1
  • python3-base&distro=SUSE Linux Enterprise Server 12 SP3-LTSS< 3.4.10-25.71.1
Ubuntu5 products
  • python3.4< 3.4.3-1ubuntu1~14.04.7+esm10
  • python3.5< 3.5.2-2ubuntu0~16.04.4~14.04.1+esm1 | < 3.5.2-2ubuntu0~16.04.13
  • python3.6< 3.6.9-1~18.04ubuntu1.4
  • python3.7< 3.7.5-2~18.04.4
  • python3.8< 3.8.0-3~18.04.1 | < 3.8.5-1~20.04.2
Mageia3 products
  • python< 2.7.18-1.4.mga7
  • python3< 3.7.9-1.1.mga7
  • python< 2.7.18-7.2.mga8
Debian1 product
  • pypy3< 7.3.5+dfsg-2
Fedoraproject1 product
Oracle1 product
Python1 product
  • python≥ 3.0.0, < 3.6.13 | ≥ 3.7.0, < 3.7.10 | ≥ 3.8.0, < 3.8.7 | ≥ 3.9.0, < 3.9.1

7 vendors · 42 products

References

30 links
Show all 30 references