Information disclosure in Python - CVE-2018-20852

Vulnerability identifier: #VU19256

CSH Severity: Medium

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2018-20852

CWE-ID: CWE-200

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to the "http.cookiejar.DefaultPolicy.domain_return_ok" in the "Lib/http/cookiejar.py" file returns incorrect results during cookie domain checks. A remote attacker can trick a victim to execute a program that uses the "http.cookiejar.DefaultPolicy" to make an HTTP connection to an attacker-controlled server with a hostname that has another valid hostname as a suffix.

Successful exploitation of this vulnerability can allow an attacker to gain unauthorized access to sensitive information on the system, such as existing cookies.

Python
Amazon Linux AMI
Gentoo Linux
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, big endian
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for ARM 64
Ubuntu
Opensuse
Fedora
Red Hat Software Collections
python (Red Hat package)
python3 (Red Hat package)
python3.5-minimal (Ubuntu package)
python3.5 (Ubuntu package)
python3.7-minimal (Ubuntu package)
python3.7 (Ubuntu package)
python3.6-minimal (Ubuntu package)
python3.6 (Ubuntu package)
python3.9-minimal (Ubuntu package)
python3.9 (Ubuntu package)
python3.11 (Ubuntu package)
python3.8-minimal (Ubuntu package)
python3.11-minimal (Ubuntu package)
python3.8 (Ubuntu package)
python2-docs
python2
python3.10 (Ubuntu package)
python3.10-minimal (Ubuntu package)
python3.12 (Ubuntu package)
python3.12-minimal (Ubuntu package)
Oracle Communications Operations Monitor
Data Computing Appliance (DCA)
Dell EMC Unity XT Operating Environment (OE)
Dell EMC Unity VSA Operating Environment (OE)
Dell EMC Unity Operating Environment (OE)
IBM Robotic Process Automation

Install updates from vendor's website.

Python - addressed in versions 3.4.10, 3.5.7, 3.6.9, 3.7.3
python (Red Hat package) - update to 2.7.5-88.el7
python3 (Red Hat package) - addressed in versions 3.6.8-13.el7, 3.6.8-23.el8
python3.5-minimal (Ubuntu package) - update to Ubuntu Pro
python3.5 (Ubuntu package) - update to Ubuntu Pro (Infra-only)
python3.7-minimal (Ubuntu package) - update to Ubuntu Pro
python3.7 (Ubuntu package) - update to Ubuntu Pro
python3.6-minimal (Ubuntu package) - update to Ubuntu Pro
python3.6 (Ubuntu package) - update to Ubuntu Pro
python3.9-minimal (Ubuntu package) - update to Ubuntu Pro
python3.9 (Ubuntu package) - update to Ubuntu Pro
python3.11 (Ubuntu package) - addressed in versions Ubuntu Pro, 3.11.6-3ubuntu0.1
python3.8-minimal (Ubuntu package) - addressed in versions Ubuntu Pro, 3.8.10-0ubuntu1~20.04.10
python3.11-minimal (Ubuntu package) - addressed in versions Ubuntu Pro, 3.11.6-3ubuntu0.1
python3.8 (Ubuntu package) - addressed in versions Ubuntu Pro, 3.8.10-0ubuntu1~20.04.10
python2-docs - addressed in versions 2.7.17-1.fc29, 2.7.17-1.fc30, 2.7.17-1.fc31
python2 - addressed in versions 2.7.17-1.fc29, 2.7.17-1.fc30, 2.7.17-1.fc31
python3.10 (Ubuntu package) - update to 3.10.12-1~22.04.4
python3.10-minimal (Ubuntu package) - update to 3.10.12-1~22.04.4
python3.12 (Ubuntu package) - update to 3.12.0-1ubuntu0.1
python3.12-minimal (Ubuntu package) - update to 3.12.0-1ubuntu0.1
Data Computing Appliance (DCA) - update to 4.3.0.0
Dell EMC Unity XT Operating Environment (OE) - update to 5.0.2.0.5.009
Dell EMC Unity VSA Operating Environment (OE) - update to 5.0.2.0.5.009
Dell EMC Unity Operating Environment (OE) - update to 5.0.2.0.5.009
IBM Robotic Process Automation - update to 21.0.5

• https://bugs.python.org/issue35121
• https://python-security.readthedocs.io/vuln/cookie-domain-check.html

• Information disclosure in Python
• OpenSUSE Linux update for python
• OpenSUSE Linux update for python
• Red Hat update for rh-python36-python
• Red Hat update for python27-python
• Gentoo update for Python
• Red Hat Enterprise Linux 7 update for python3
• Red Hat Enterprise Linux 7 update for python
• Multiple vulnerabilities in Oracle Communications Operations Monitor
• Red Hat Enterprise Linux 8 update for python3
• Red Hat Enterprise Linux 8 update for the python27:2.7 module
• Amazon Linux AMI update for python27
• Multiple vulnerabilities in Dell EMC Unity Family, Dell EMC Unity XT Family
• Multiple vulnerabilities in Dell EMC Data Computing Appliance (DCA)
• Multiple vulnerabilities in IBM Robotic Process Automation for Cloud Pak
• Ubuntu update for python3.10
• Fedora 31 update for python2, python2-docs
• Fedora 30 update for python2, python2-docs
• Fedora 29 update for python2, python2-docs