{"schemaVersion":3,"id":"USN-3817-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"python2.7, python3.4, python3.5 vulnerabilities\n\nIt was discovered that Python incorrectly handled large amounts of data. A\nremote attacker could use this issue to cause Python to crash, resulting in\na denial of service, or possibly execute arbitrary code. This issue only\naffected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. (CVE-2018-1000030)\n\nIt was discovered that Python incorrectly handled running external commands\nin the shutil module. A remote attacker could use this issue to cause\nPython to crash, resulting in a denial of service, or possibly execute\narbitrary code. (CVE-2018-1000802)\n\nIt was discovered that Python incorrectly used regular expressions\nvulnerable to catastrophic backtracking. A remote attacker could possibly\nuse this issue to cause a denial of service. This issue only affected\nUbuntu 14.04 LTS and Ubuntu 16.04 LTS. (CVE-2018-1060, CVE-2018-1061)\n\nIt was discovered that Python failed to initialize Expat's hash salt. A\nremote attacker could possibly use this issue to cause hash collisions,\nleading to a denial of service. (CVE-2018-14647)","dates":{"published":"2018-11-13T15:40:04.000Z","modified":"2026-04-22T09:51:59.659Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"ubuntu","product":"python2.7","name":"python2.7","label":"python2.7","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/python2.7","purlType":"deb","versions":[{"text":"< 2.7.6-8ubuntu0.5","noFixRecorded":false,"fixedIn":null},{"text":"< 2.7.12-1ubuntu0~16.04.4","noFixRecorded":false,"fixedIn":null},{"text":"< 2.7.15~rc1-1ubuntu0.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.7.6-8ubuntu0.5 | < 2.7.12-1ubuntu0~16.04.4 | < 2.7.15~rc1-1ubuntu0.1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"python3.4","name":"python3.4","label":"python3.4","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/python3.4","purlType":"deb","versions":[{"text":"< 3.4.3-1ubuntu1~14.04.7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.4.3-1ubuntu1~14.04.7","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"python3.5","name":"python3.5","label":"python3.5","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/python3.5","purlType":"deb","versions":[{"text":"< 3.5.2-2ubuntu0~16.04.5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.5.2-2ubuntu0~16.04.5","eol":null,"hubHref":null}],"affectedCount":3,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://ubuntu.com/security/notices/USN-3817-1","label":"ubuntu.com/security/notices/USN-3817-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-1060","label":"ubuntu.com/security/CVE-2018-1060","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2018-1061","label":"ubuntu.com/security/CVE-2018-1061","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2018-14647","label":"ubuntu.com/security/CVE-2018-14647","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2018-1000030","label":"ubuntu.com/security/CVE-2018-1000030","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2018-1000802","label":"ubuntu.com/security/CVE-2018-1000802","hostname":"ubuntu.com","tags":["REPORT"]}],"lineage":{"upstream":["CVE-2018-1000030","CVE-2018-1000802","CVE-2018-1060","CVE-2018-1061","CVE-2018-14647"],"downstream":[],"duplicates":[],"related":["CVE-2018-1000030","CVE-2018-1000802","CVE-2018-1060","CVE-2018-1061","CVE-2018-14647"]},"timeline":[{"kind":"published","date":"2018-11-13T15:40:04.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-04-22T09:51:59.659Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T13:38:49.214Z","stale":false,"partial":false}}