Input validation error in Python - CVE-2025-1795

Vulnerability identifier: #VU107949

CSH Severity: Low

CVSS v4: 6.3 [CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2025-1795

CWE-ID: CWE-20

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform spoofing attack.

The vulnerability exists due to insufficient validation of user-supplied input in Lib/email/_header_value_parser.py. A remote attacker can pass specially crafted input to the application and manipulate headers in an email message.

Python
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
APEX Cloud Platform for Red Hat OpenShift
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Real Time 15
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Manager Proxy
SUSE Linux Micro
Public Cloud Module
Python 3 Module
Basesystem Module
openSUSE Leap
Ubuntu
openEuler
APEX Cloud Platform for Microsoft Azure
IBM Virtualization Engine TS7700 3948-VED
System Storage Virtualization Engine TS7700 3948-VEF
python3.10 (Ubuntu package)
python3-help
python3-devel
python3-debugsource
python3-debuginfo
python3-debug
python3
python3-unversioned-command
python3-tkinter
python311-base-64bit-debuginfo
python311-curses
python311-base-64bit
python311
libpython3_11-1_0
python311-base
python311-tk
python311-doc
python311-debuginfo
python311-idle
python311-testsuite
python311-64bit-debuginfo
python311-tk-debuginfo
libpython3_11-1_0-debuginfo
python311-base-debuginfo
python311-testsuite-debuginfo
python311-core-debugsource
python311-doc-devhelp
python311-tools
python311-curses-debuginfo
python311-debugsource
python311-dbm-debuginfo
python311-devel
libpython3_11-1_0-64bit
python311-64bit
libpython3_11-1_0-64bit-debuginfo
python311-32bit
python311-32bit-debuginfo
python311-base-32bit-debuginfo
libpython3_11-1_0-32bit
python311-base-32bit
libpython3_11-1_0-32bit-debuginfo
python311-dbm
python312-testsuite
libpython3_12-1_0-debuginfo
python312-tk-debuginfo
python312-tools
python312-base
python312-dbm-debuginfo
python312-tk
python312-devel
python312-core-debugsource
python312-debugsource
python312-curses
python312-dbm
python312-doc-devhelp
python312-base-debuginfo
python312
python312-debuginfo
python312-curses-debuginfo
python312-testsuite-debuginfo
libpython3_12-1_0
python312-doc
python312-32bit-debuginfo
libpython3_12-1_0-32bit-debuginfo
python312-base-32bit
libpython3_12-1_0-32bit
python312-base-32bit-debuginfo
python312-32bit
python312-64bit-debuginfo
python312-64bit
libpython3_12-1_0-64bit
libpython3_12-1_0-64bit-debuginfo
python312-base-64bit-debuginfo
python312-base-64bit
python312-idle
Virtualization Engine TS7700 3957-VED

Install updates from vendor's website.

Python - addressed in versions 3.11.9, 3.12.3, 3.13.0a5
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data - update to 5.2.1
APEX Cloud Platform for Microsoft Azure - update to 01.04.01.00
APEX Cloud Platform for Red Hat OpenShift - update to 03.02.04.00
python3.10 (Ubuntu package) - addressed in versions 3.6.9-1~18.04ubuntu1.13+esm5, 3.7.5-2ubuntu1~18.04.2+esm6, 3.8.0-3ubuntu1~18.04.2+esm5, 3.8.10-0ubuntu1~20.04.18+esm1, 3.9.5-3ubuntu0~20.04.1+esm5, 3.10.12-1~22.04.10, 3.11.0~rc1-1~22.04.1~esm4, 3.12.3-1ubuntu0.6, 3.12.7-1ubuntu2.1, 3.13.3-1ubuntu0.1
python3-help - addressed in versions 3.7.9-44, 3.9.9-41, 3.9.9-45, 3.11.6-14, 3.11.6-16
python3-devel - addressed in versions 3.7.9-44, 3.9.9-41, 3.9.9-45, 3.11.6-14, 3.11.6-16
python3-debugsource - addressed in versions 3.7.9-44, 3.9.9-41, 3.9.9-45, 3.11.6-14, 3.11.6-16
python3-debuginfo - addressed in versions 3.7.9-44, 3.9.9-41, 3.9.9-45, 3.11.6-14, 3.11.6-16
python3-debug - addressed in versions 3.7.9-44, 3.9.9-41, 3.9.9-45, 3.11.6-14, 3.11.6-16
python3 - addressed in versions 3.7.9-44, 3.9.9-41, 3.9.9-45, 3.11.6-14, 3.11.6-16
python3-unversioned-command - addressed in versions 3.9.9-41, 3.9.9-45, 3.11.6-14, 3.11.6-16
python3-tkinter - addressed in versions 3.11.6-14, 3.11.6-16
python311-base-64bit-debuginfo - addressed in versions 3.11.11-150400.9.49.1, 3.11.11-150600.3.21.1
python311-curses - addressed in versions 3.11.11-150400.9.49.1, 3.11.11-150600.3.21.1, 3.11.12-slfo.1.1_1.1
python311-base-64bit - addressed in versions 3.11.11-150400.9.49.1, 3.11.11-150600.3.21.1
python311 - addressed in versions 3.11.11-150400.9.49.1, 3.11.11-150600.3.21.1, 3.11.12-slfo.1.1_1.1
libpython3_11-1_0 - addressed in versions 3.11.11-150400.9.49.1, 3.11.11-150600.3.21.1, 3.11.12-slfo.1.1_1.1
python311-base - addressed in versions 3.11.11-150400.9.49.1, 3.11.11-150600.3.21.1, 3.11.12-slfo.1.1_1.1
python311-tk - addressed in versions 3.11.11-150400.9.49.1, 3.11.11-150600.3.21.1
python311-doc - addressed in versions 3.11.11-150400.9.49.1, 3.11.11-150600.3.21.1
python311-debuginfo - addressed in versions 3.11.11-150400.9.49.1, 3.11.11-150600.3.21.1, 3.11.12-slfo.1.1_1.1
python311-idle - addressed in versions 3.11.11-150400.9.49.1, 3.11.11-150600.3.21.1
python311-testsuite - addressed in versions 3.11.11-150400.9.49.1, 3.11.11-150600.3.21.1
python311-64bit-debuginfo - addressed in versions 3.11.11-150400.9.49.1, 3.11.11-150600.3.21.1
python311-tk-debuginfo - addressed in versions 3.11.11-150400.9.49.1, 3.11.11-150600.3.21.1
libpython3_11-1_0-debuginfo - addressed in versions 3.11.11-150400.9.49.1, 3.11.11-150600.3.21.1, 3.11.12-slfo.1.1_1.1
python311-base-debuginfo - addressed in versions 3.11.11-150400.9.49.1, 3.11.11-150600.3.21.1, 3.11.12-slfo.1.1_1.1
python311-testsuite-debuginfo - addressed in versions 3.11.11-150400.9.49.1, 3.11.11-150600.3.21.1
python311-core-debugsource - addressed in versions 3.11.11-150400.9.49.1, 3.11.11-150600.3.21.1, 3.11.12-slfo.1.1_1.1
python311-doc-devhelp - addressed in versions 3.11.11-150400.9.49.1, 3.11.11-150600.3.21.1
python311-tools - addressed in versions 3.11.11-150400.9.49.1, 3.11.11-150600.3.21.1
python311-curses-debuginfo - addressed in versions 3.11.11-150400.9.49.1, 3.11.11-150600.3.21.1, 3.11.12-slfo.1.1_1.1
python311-debugsource - addressed in versions 3.11.11-150400.9.49.1, 3.11.11-150600.3.21.1, 3.11.12-slfo.1.1_1.1
python311-dbm-debuginfo - addressed in versions 3.11.11-150400.9.49.1, 3.11.11-150600.3.21.1
python311-devel - addressed in versions 3.11.11-150400.9.49.1, 3.11.11-150600.3.21.1
libpython3_11-1_0-64bit - addressed in versions 3.11.11-150400.9.49.1, 3.11.11-150600.3.21.1
python311-64bit - addressed in versions 3.11.11-150400.9.49.1, 3.11.11-150600.3.21.1
libpython3_11-1_0-64bit-debuginfo - addressed in versions 3.11.11-150400.9.49.1, 3.11.11-150600.3.21.1
python311-32bit - addressed in versions 3.11.11-150400.9.49.1, 3.11.11-150600.3.21.1
python311-32bit-debuginfo - addressed in versions 3.11.11-150400.9.49.1, 3.11.11-150600.3.21.1
python311-base-32bit-debuginfo - addressed in versions 3.11.11-150400.9.49.1, 3.11.11-150600.3.21.1
libpython3_11-1_0-32bit - addressed in versions 3.11.11-150400.9.49.1, 3.11.11-150600.3.21.1
python311-base-32bit - addressed in versions 3.11.11-150400.9.49.1, 3.11.11-150600.3.21.1
libpython3_11-1_0-32bit-debuginfo - addressed in versions 3.11.11-150400.9.49.1, 3.11.11-150600.3.21.1
python311-dbm - addressed in versions 3.11.11-150400.9.49.1, 3.11.11-150600.3.21.1
python312-testsuite - update to 3.12.9-150600.3.21.1
libpython3_12-1_0-debuginfo - update to 3.12.9-150600.3.21.1
python312-tk-debuginfo - update to 3.12.9-150600.3.21.1
python312-tools - update to 3.12.9-150600.3.21.1
python312-base - update to 3.12.9-150600.3.21.1
python312-dbm-debuginfo - update to 3.12.9-150600.3.21.1
python312-tk - update to 3.12.9-150600.3.21.1
python312-devel - update to 3.12.9-150600.3.21.1
python312-core-debugsource - update to 3.12.9-150600.3.21.1
python312-debugsource - update to 3.12.9-150600.3.21.1
python312-curses - update to 3.12.9-150600.3.21.1
python312-dbm - update to 3.12.9-150600.3.21.1
python312-doc-devhelp - update to 3.12.9-150600.3.21.1
python312-base-debuginfo - update to 3.12.9-150600.3.21.1
python312 - update to 3.12.9-150600.3.21.1
python312-debuginfo - update to 3.12.9-150600.3.21.1
python312-curses-debuginfo - update to 3.12.9-150600.3.21.1
python312-testsuite-debuginfo - update to 3.12.9-150600.3.21.1
libpython3_12-1_0 - update to 3.12.9-150600.3.21.1
python312-doc - update to 3.12.9-150600.3.21.1
python312-32bit-debuginfo - update to 3.12.9-150600.3.21.1
libpython3_12-1_0-32bit-debuginfo - update to 3.12.9-150600.3.21.1
python312-base-32bit - update to 3.12.9-150600.3.21.1
libpython3_12-1_0-32bit - update to 3.12.9-150600.3.21.1
python312-base-32bit-debuginfo - update to 3.12.9-150600.3.21.1
python312-32bit - update to 3.12.9-150600.3.21.1
python312-64bit-debuginfo - update to 3.12.9-150600.3.21.1
python312-64bit - update to 3.12.9-150600.3.21.1
libpython3_12-1_0-64bit - update to 3.12.9-150600.3.21.1
libpython3_12-1_0-64bit-debuginfo - update to 3.12.9-150600.3.21.1
python312-base-64bit-debuginfo - update to 3.12.9-150600.3.21.1
python312-base-64bit - update to 3.12.9-150600.3.21.1
python312-idle - update to 3.12.9-150600.3.21.1
Virtualization Engine TS7700 3957-VED - addressed in versions 8.54.1.27 VTD_EXEC.407, 8.60.0.115 VTD_EXEC.407, 8.61.0.60
IBM Virtualization Engine TS7700 3948-VED - addressed in versions 8.54.1.27 VTD_EXEC.407, 8.54.2.17 VTD_EXEC.407, 8.60.0.115 VTD_EXEC.407, 8.61.0.60
System Storage Virtualization Engine TS7700 3948-VEF - addressed in versions 8.60.0.115 VTD_EXEC.407, 8.61.0.60

• https://github.com/python/cpython/commit/09fab93c3d857496c0bd162797fab816c311ee48
• https://github.com/python/cpython/commit/70754d21c288535e86070ca7a6e90dcb670b8593
• https://github.com/python/cpython/commit/9148b77e0af91cdacaa7fe3dfac09635c3fe9a74
• https://github.com/python/cpython/issues/100884
• https://github.com/python/cpython/pull/100885
• https://github.com/python/cpython/pull/119099
• https://mail.python.org/archives/list/security-announce@python.org/thread/MB62IZMEC3UM6SGHP5LET5JX2Y7H4ZUR/

• Improper input validatin in Python
• Dell APEX Cloud Platform for Red Hat OpenShift update for third-party components
• SUSE update for python312
• SUSE update for python311
• SUSE update for python311
• Dell APEX Cloud Platform for Microsoft Azure update for third-party components
• SUSE update for python311
• Ubuntu update for python3.10
• Multiple vulnerabilities in IBM Watson Speech Services Cartridge
• openEuler 24.03 LTS update for python3
• openEuler 24.03 LTS SP1 update for python3
• openEuler 22.03 LTS SP4 update for python3
• openEuler 22.03 LTS SP3 update for python3
• openEuler 20.03 LTS SP4 update for python3
• openEuler 24.03 LTS SP2 update for python3
• Multiple vulnerabilities in IBM System Storage Virtualization Engine TS7700