Known vulnerabilities in python2.7 (Ubuntu package)

Software CPE: cpe:2.3:o:canonical:python27_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Total vulnerabilities: 39
Public exploits: 2
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting python2.7 (Ubuntu package) python2.7 (Ubuntu package) is affected by 39 known vulnerabilities: 3 high, 33 medium, 3 low Critical High Medium Low

Vulnerabilities (39)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU122819 - Command injection
CVE-2025-15367
CWE-77 Medium
No
No
2.7.6-8ubuntu0.6+esm29, 2.7.12-1ubuntu0~16.04.18+esm19, 2.7.17-1~18.04ubuntu1.13+esm14, 2.7.18-1~20.04.7+esm9, 2.7.18-13ubuntu1.5+esm8 13.02.2026 SB2026021343
SB2026021347
SB2026021348
and 57 more
#VU122818 - Command injection
CVE-2025-15366
CWE-77 Medium
No
No
2.7.6-8ubuntu0.6+esm29, 2.7.12-1ubuntu0~16.04.18+esm19, 2.7.17-1~18.04ubuntu1.13+esm14, 2.7.18-1~20.04.7+esm9, 2.7.18-13ubuntu1.5+esm8 13.02.2026 SB2026021343
SB2026021347
SB2026021348
and 53 more
#VU122816 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2025-15282
CWE-93 Medium
No
No
2.7.6-8ubuntu0.6+esm29, 2.7.12-1ubuntu0~16.04.18+esm19, 2.7.17-1~18.04ubuntu1.13+esm14, 2.7.18-1~20.04.7+esm9, 2.7.18-13ubuntu1.5+esm8 13.02.2026 SB2026021343
SB2026021353
SB2026021354
and 25 more
#VU122815 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-0865
CWE-444 Medium
No
No
2.7.6-8ubuntu0.6+esm29, 2.7.12-1ubuntu0~16.04.18+esm19, 2.7.17-1~18.04ubuntu1.13+esm14, 2.7.18-1~20.04.7+esm9, 2.7.18-13ubuntu1.5+esm8 13.02.2026 SB2026021343
SB2026021347
SB2026021348
and 50 more
#VU122814 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2026-0672
CWE-93 Medium
No
No
2.7.6-8ubuntu0.6+esm29, 2.7.12-1ubuntu0~16.04.18+esm19, 2.7.17-1~18.04ubuntu1.13+esm14, 2.7.18-1~20.04.7+esm9, 2.7.18-13ubuntu1.5+esm8 13.02.2026 SB2026021343
SB2026021353
SB2026021354
and 30 more
#VU122813 - Improper input validation
CVE-2025-11468
CWE-20 Medium
No
No
2.7.6-8ubuntu0.6+esm29, 2.7.12-1ubuntu0~16.04.18+esm19, 2.7.17-1~18.04ubuntu1.13+esm14, 2.7.18-1~20.04.7+esm9, 2.7.18-13ubuntu1.5+esm8 13.02.2026 SB2026021343
SB2026021353
SB2026021354
and 25 more
#VU119238 - Inefficient Algorithmic Complexity
CVE-2025-12084
CWE-407 Low
No
No
2.7.6-8ubuntu0.6+esm29, 2.7.12-1ubuntu0~16.04.18+esm19, 2.7.17-1~18.04ubuntu1.13+esm14, 2.7.18-1~20.04.7+esm9, 2.7.18-13ubuntu1.5+esm8 06.12.2025 SB2025120606
SB20251226352
SB2025123104
and 48 more
#VU119234 - Resource exhaustion
CVE-2025-13837
CWE-400 Medium
No
No
2.7.6-8ubuntu0.6+esm29, 2.7.12-1ubuntu0~16.04.18+esm19, 2.7.17-1~18.04ubuntu1.13+esm14, 2.7.18-1~20.04.7+esm9, 2.7.18-13ubuntu1.5+esm8 06.12.2025 SB2025120603
SB20251226352
SB2025123104
and 13 more
#VU113739 - Resource Management Errors
CVE-2025-6069
CWE-399 Medium
No
No
2.7.6-8ubuntu0.6+esm26, 2.7.12-1ubuntu0~16.04.18+esm17, 2.7.17-1~18.04ubuntu1.13+esm12, 2.7.18-1~20.04.7+esm8, 2.7.18-13ubuntu1.5+esm7 07.08.2025 SB2025080731
SB2025080736
SB2025080737
and 40 more
#VU113738 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2025-8194
CWE-835 Medium
No
No
2.7.6-8ubuntu0.6+esm26, 2.7.12-1ubuntu0~16.04.18+esm17, 2.7.17-1~18.04ubuntu1.13+esm12, 2.7.18-1~20.04.7+esm8, 2.7.18-13ubuntu1.5+esm7 07.08.2025 SB2025080731
SB2025080738
SB2025080739
and 93 more
#VU103812 - Improper input validation
CVE-2025-0938
CWE-20 Low
No
No
2.7.6-8ubuntu0.6+esm25, 2.7.6-8ubuntu0.6+esm28, 2.7.12-1ubuntu0~16.04.18+esm16, 2.7.17-1~18.04ubuntu1.13+esm11, 2.7.18-1~20.04.7+esm7, 2.7.18-13ubuntu1.5+esm6, 3.4.3-1ubuntu1~14.04.7+esm15, 3.6.9-1~18.04ubuntu1.13+esm4, 3.7.5-2ubuntu1~18.04.2+esm5, 3.8.0-3ubuntu1~18.04.2+esm4, 3.9.5-3ubuntu0~20.04.1+esm4, 3.11.0~rc1-1~22.04.1~esm3, 3.13.0-1ubuntu0.2 11.02.2025 SB20250211115
SB20250211130
SB20250211131
and 79 more
#VU100516 - Improper input validation
CVE-2024-11168
CWE-20 Medium
No
No
Ubuntu Pro (Infra-only), 2.7.6-8ubuntu0.6+esm28 15.11.2024 SB2024111507
SB2024111526
SB2024111527
and 76 more
#VU99357 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-9287
CWE-78 Low
No
No
Ubuntu Pro (Infra-only) 28.10.2024 SB2024102836
SB2024102838
SB20241101111
and 117 more
#VU96945 - Resource exhaustion
CVE-2024-7592
CWE-400 Medium
No
No
Ubuntu Pro (Infra-only), 2.7.12-1ubuntu0~16.04.18+esm18, 2.7.17-1~18.04ubuntu1.13+esm13, 2.7.18-1~20.04.5, 2.7.18-1~20.04.6, 2.7.18-13ubuntu1.3, 2.7.18-13ubuntu1.4 09.09.2024 SB2024090916
SB2024090917
SB2024090918
and 72 more
#VU96745 - Incorrect Regular Expression
CVE-2024-6232
CWE-185 Medium
No
No
Ubuntu Pro (Infra-only), 2.7.12-1ubuntu0~16.04.18+esm18, 2.7.17-1~18.04ubuntu1.13+esm13, 2.7.18-1~20.04.5, 2.7.18-1~20.04.6, 2.7.18-13ubuntu1.3, 2.7.18-13ubuntu1.4 03.09.2024 SB2024090377
SB2024090927
SB2024091048
and 145 more
#VU96596 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-8088
CWE-835 Medium
No
No
Ubuntu Pro (Infra-only), 2.7.12-1ubuntu0~16.04.18+esm18, 2.7.17-1~18.04ubuntu1.13+esm13, 2.7.18-1~20.04.5, 2.7.18-1~20.04.6, 2.7.18-13ubuntu1.3, 2.7.18-13ubuntu1.4 28.08.2024 SB2024082860
SB2024082861
SB2024082862
and 82 more
#VU95571 - Command injection
CVE-2024-6923
CWE-77 Medium
No
No
Ubuntu Pro (Infra-only), 2.7.12-1ubuntu0~16.04.18+esm18, 2.7.17-1~18.04ubuntu1.13+esm13, 2.7.18-1~20.04.5, 2.7.18-1~20.04.6, 2.7.18-13ubuntu1.3, 2.7.18-13ubuntu1.4 08.08.2024 SB2024080861
SB2024080862
SB2024080863
and 144 more
#VU87685 - Resource exhaustion
CVE-2024-0450
CWE-400 Medium
No
No
Ubuntu Pro (Infra-only) 21.03.2024 SB2024032107
SB2024032110
SB2024040848
and 80 more
#VU82980 - Improper input validation
CVE-2023-27043
CWE-20 Medium
No
No
Ubuntu Pro (Infra-only), 2.7.12-1ubuntu0~16.04.18+esm18, 2.7.17-1~18.04ubuntu1.13+esm13, 2.7.18-1~20.04.5, 2.7.18-1~20.04.6, 2.7.18-13ubuntu1.3, 2.7.18-13ubuntu1.4 10.11.2023 SB2023041957
SB2023111064
SB2023111315
and 120 more
#VU69392 - Resource exhaustion
CVE-2022-45061
CWE-400 Medium
No
No
Ubuntu Pro (Infra-only), 2.7.17-1~18.04ubuntu1.10 16.11.2022 SB2022111650
SB2022112824
SB2022112856
and 125 more


Showing elements 1 - 20 out of 39