Known vulnerabilities in python2.7 (Ubuntu package) - page 2

Software CPE: cpe:2.3:o:canonical:python27_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Total vulnerabilities: 39
Public exploits: 2
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting python2.7 (Ubuntu package) python2.7 (Ubuntu package) is affected by 39 known vulnerabilities: 3 high, 33 medium, 3 low Critical High Medium Low

Vulnerabilities (39)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU82079 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2022-48566
CWE-362 Medium
No
No
2.7.18-1~20.04.7, 2.7.18-13ubuntu1.5 17.10.2023 SB2023101709
SB2023101713
SB2023101714
and 17 more
#VU82078 - Use After Free
CVE-2022-48560
CWE-416 Medium
No
No
Ubuntu Pro (Infra-only), 2.7.18-1~20.04.7, 2.7.18-13ubuntu1.5 17.10.2023 SB2023101708
SB2023101712
SB20231017145
and 29 more
#VU82077 - Resource exhaustion
CVE-2022-48564
CWE-400 Medium
No
No
Ubuntu Pro (Infra-only) 17.10.2023 SB2023101707
SB20231123125
SB2023112746
and 19 more
#VU80564 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2022-48565
CWE-611 Medium
Available
No
Ubuntu Pro (Infra-only), 2.7.18-1~20.04.7, 2.7.18-13ubuntu1.5 08.09.2023 SB2023090833
SB2023090836
SB2023101232
and 24 more
#VU80228 - Cleartext Transmission of Sensitive Information
CVE-2023-40217
CWE-319 Medium
No
No
Ubuntu Pro (Infra-only), 2.7.18-1~20.04.7, 2.7.18-13ubuntu1.5 01.09.2023 SB2023090142
SB2023090143
SB2023090144
and 139 more
#VU72618 - Improper input validation
CVE-2023-24329
CWE-20 Medium
No
No
Ubuntu Pro (Infra-only), 2.7.17-1~18.04ubuntu1.11, 2.7.18-1~20.04.7, 2.7.18-13ubuntu1.5 28.02.2023 SB2023022819
SB2023022822
SB2023030832
and 158 more
#VU68887 - Integer overflow
CVE-2022-37454
CWE-190 High
Available
No
2.7.17-1~18.04ubuntu1.10 01.11.2022 SB2022110118
SB2022110119
SB2022110209
and 69 more
#VU64573 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2015-20107
CWE-78 High
No
No
2.7.17-1~18.04ubuntu1.8, 2.7.18-1~20.04.3, 2.7.18-8ubuntu0.2, 2.7.18-13ubuntu1.1 22.06.2022 SB2022062206
SB2022062207
SB2022062436
and 85 more
#VU61681 - Server-Side Request Forgery (SSRF)
CVE-2021-4189
CWE-918 Medium
No
No
2.7.17-1~18.04ubuntu1.7 29.03.2022 SB2022032904
SB2022032905
SB2022032907
and 42 more
#VU61675 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2022-0391
CWE-93 Medium
No
No
2.7.17-1~18.04ubuntu1.7 29.03.2022 SB2022032903
SB2022032905
SB2022032907
and 49 more
#VU60098 - Improper input validation
CVE-2021-3426
CWE-20 Medium
No
No
2.7.17-1~18.04ubuntu1.7 27.01.2022 SB2022012753
SB2022032905
SB2022032907
and 34 more
#VU50621 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-27619
CWE-94 Medium
No
No
2.7.6-8ubuntu0.6+esm8, 2.7.12-1ubuntu0~16.04.14, 2.7.12-1ubuntu0~16.04.16, 2.7.12-1ubuntu0~16.04.18, 2.7.17-1~18.04ubuntu1.3, 2.7.17-1~18.04ubuntu1.5, 2.7.17-1~18.04ubuntu1.6, 2.7.17-1~18.04ubuntu1.7, 2.7.18-1~20.04.1, 2.7.68ubuntu0.6+esm10 11.02.2021 SB2020112330
SB2021032307
SB2021032607
and 24 more
#VU49973 - Memory corruption
CVE-2021-3177
CWE-119 High
No
No
2.7.6-8ubuntu0.6+esm8, 2.7.12-1ubuntu0~16.04.14, 2.7.12-1ubuntu0~16.04.16, 2.7.12-1ubuntu0~16.04.18, 2.7.17-1~18.04ubuntu1.3, 2.7.17-1~18.04ubuntu1.5, 2.7.17-1~18.04ubuntu1.6, 2.7.17-1~18.04ubuntu1.7, 2.7.18-1~20.04.1, 2.7.68ubuntu0.6+esm10 19.01.2021 SB2021012516
SB2021012517
SB2021022418
and 54 more
#VU48592 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2020-26116
CWE-93 Medium
No
No
2.7.3-0ubuntu3.19, 2.7.6-8ubuntu0.6+esm7, 2.7.12-1ubuntu0~16.04.13, 2.7.17-1~18.04ubuntu1.2, 2.7.18-1~20.04.1 27.09.2020 SB2020092711
SB2020112308
SB2020112309
and 34 more
#VU32881 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2019-20907
CWE-835 Medium
No
No
2.7.3-0ubuntu3.18, 2.7.6-8ubuntu0.6+esm6, 2.7.12-1ubuntu0~16.04.12, 2.7.17-1~18.04ubuntu1.11, 2.7.18-1~20.04.1 29.07.2020 SB2020071324
SB2020080201
SB2020082408
and 53 more
#VU29544 - Resource exhaustion
CVE-2020-14422
CWE-400 Medium
No
No
2.7.3-0ubuntu3.18, 2.7.6-8ubuntu0.6+esm6, 2.7.12-1ubuntu0~16.04.12, 2.7.17-1~18.04ubuntu1.11 07.07.2020 SB2020070704
SB2020070705
SB2020070710
and 40 more
#VU25631 - Resource Management Errors
CVE-2020-8492
CWE-399 Medium
No
No
2.7.18-1~20.04.1 26.02.2020 SB2020013016
SB2020030201
SB2020051503
and 25 more
#VU25630 - Resource exhaustion
CVE-2019-9674
CWE-400 Medium
No
No
Ubuntu Pro (Infra-only), 2.7.3-0ubuntu3.18, 2.7.6-8ubuntu0.6+esm6, 2.7.12-1ubuntu0~16.04.12, 2.7.17-1~18.04ubuntu1.11, 2.7.18-1~20.04.1 26.02.2020 SB2020030201
SB2020052312
SB2021031218
and 3 more
#VU35161 - Improper input validation
CVE-2019-17514
CWE-20 Medium
No
No
2.7.3-0ubuntu3.18, 2.7.6-8ubuntu0.6+esm6, 2.7.12-1ubuntu0~16.04.12, 2.7.17-1~18.04ubuntu1.11, 2.7.18-1~20.04.1 12.10.2019 SB2019101202
SB2021031218
SB20240711142
and 1 more


Showing elements 21 - 40 out of 39