Infinite loop in Python - CVE-2019-20907

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU32881

Infinite loop in Python - CVE-2019-20907

Published: July 29, 2020


Vulnerability identifier: #VU32881
CSH Severity: Medium
CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2019-20907
CWE-ID: CWE-835
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to infinite loop In Lib/tarfile.py in Python. A remote attacker can create a specially crafted TAR archive leading to an infinite loop when opened by tarfile.open, because _proc_pax lacks header validation.


Affected software

Python
Gentoo Linux
Amazon Linux AMI
Arch Linux
F5OS
Red Hat Enterprise Linux for Power 9
Red Hat Enterprise Linux for IBM System z (Structure A)
Red Hat Enterprise Linux Server
CentOS
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for Power, big endian
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux Workstation
Fedora
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for Power, big endian - Extended Update Support
Red Hat Enterprise Linux EUS Compute Node
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for x86_64
Anolis OS
Ubuntu
Opensuse
openEuler
BIG-IP
Ansible Automation Platform
Red Hat OpenShift Serverless
Quay
OpenShift Data Foundation (formerly OpenShift Container Storage)
python (Red Hat package)
python3 (Red Hat package)
python3 (Alpine package)
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
Red Hat Enterprise Linux Server for x86_64 - Update Services for SAP Solutions
python3.7 (Ubuntu package)
python3.11 (Ubuntu package)
python3.11-minimal (Ubuntu package)
python3.5-minimal (Ubuntu package)
python3.5 (Ubuntu package)
python3.8 (Ubuntu package)
python3.7-minimal (Ubuntu package)
python3.8-minimal (Ubuntu package)
python3.9 (Ubuntu package)
python3.9-minimal (Ubuntu package)
python3.6 (Ubuntu package)
python3.6-minimal (Ubuntu package)
python38-wcwidth
python38-PyMySQL
python38-pluggy
python38-Cython
python38-wheel-wheel
python38-wheel
python38-markupsafe
python38-asn1crypto
python38-atomicwrites
python38-scipy
python38-pysocks
python38-py
python38-six
python38-cffi
python38-numpy-doc
python38-numpy-f2py
python38-numpy
python38-urllib3
python38-pyparsing
python38-babel
python2.7 (Ubuntu package)
python2.7-minimal (Ubuntu package)
python2-devel
python2
python2-help
python2-tools
python2-tkinter
python2-debug
python2-debuginfo
python2-debugsource
python27
python38-cryptography
python38-psycopg2-tests
python38-psycopg2-doc
python38-psycopg2
python38-idna
python38-jinja2
python38-pycparser
python38-requests
python38-chardet
python3.4-minimal (Ubuntu package)
python3.4 (Ubuntu package)
python34
python35
python3.5
python36
python3-debug
python3
python3-debuginfo
python3-debugsource
python3-devel
python3-help
python37
mingw-python3
python38
python3-docs
python38-debug
python38-devel
python38-idle
python38-libs
python38-test
python38-tkinter
python38-rpm-macros
python39
python3.10-minimal (Ubuntu package)
python3.10 (Ubuntu package)
python38-ply
python3.12-minimal (Ubuntu package)
python3.12 (Ubuntu package)
python38-lxml
python38-pytest
python38-mod_wsgi
python38-pyyaml
python38-psutil
python38-more-itertools
python38-packaging
python38-attrs
python38-pip
python38-pip-wheel
python38-setuptools
python38-setuptools-wheel
python38-pytz
Red Hat OpenShift Container Platform
BIG-IQ Centralized Management
Cloud Pak for Data
PowerStore T
PowerStore X
Data Computing Appliance (DCA)
Junos Space Security Director

How to mitigate CVE-2019-20907

Install updates from vendor's website.

Python - update to 3.8.4
Ansible Automation Platform - update to 1.2.4
Red Hat OpenShift Serverless - addressed in versions 1.10.2, 1.11.0
python (Red Hat package) - addressed in versions 2.7.5-64.el7_4, 2.7.5-84.el7_6, 2.7.5-88.el7_7, 2.7.5-90.el7
Quay - update to 3.3.3
python3 (Red Hat package) - addressed in versions 3.6.8-18.el7, 3.6.8-31.el8
python3 (Alpine package) - update to 3.8.5-r0
Red Hat OpenShift Container Platform - addressed in versions 4.5.20, 4.5.23
python3.7 (Ubuntu package) - addressed in versions Ubuntu Pro, 3.7.5-2~18.04.4
python3.11 (Ubuntu package) - addressed in versions Ubuntu Pro, 3.11.6-3ubuntu0.1
python3.11-minimal (Ubuntu package) - addressed in versions Ubuntu Pro, 3.11.6-3ubuntu0.1
python3.5-minimal (Ubuntu package) - addressed in versions Ubuntu Pro, 3.5.2-2ubuntu0~16.04.11
python3.5 (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 3.5.2-2ubuntu0~16.04.11
python3.8 (Ubuntu package) - addressed in versions Ubuntu Pro, 3.8.0-3~18.04.1, 3.8.2-1ubuntu1.2, 3.8.10-0ubuntu1~20.04.10
python3.7-minimal (Ubuntu package) - addressed in versions Ubuntu Pro, 3.7.5-2~18.04.4
python3.8-minimal (Ubuntu package) - addressed in versions Ubuntu Pro, 3.8.0-3~18.04.1, 3.8.2-1ubuntu1.2, 3.8.10-0ubuntu1~20.04.10
python3.9 (Ubuntu package) - update to Ubuntu Pro
python3.9-minimal (Ubuntu package) - update to Ubuntu Pro
python3.6 (Ubuntu package) - addressed in versions Ubuntu Pro, 3.6.9-1~18.04ubuntu1.12
python3.6-minimal (Ubuntu package) - addressed in versions Ubuntu Pro, 3.6.9-1~18.04ubuntu1.12
python38-wcwidth - update to 0.1.7-16
python38-PyMySQL - update to 0.10.1-1
python38-pluggy - update to 0.13.0-3
python38-Cython - update to 0.29.14-4
python38-wheel-wheel - update to 0.33.6-6
python38-wheel - update to 0.33.6-6
python38-markupsafe - update to 1.1.1-6
python38-asn1crypto - update to 1.2.0-3
python38-atomicwrites - update to 1.3.0-8
python38-scipy - update to 1.3.1-4
python38-pysocks - update to 1.7.1-4
python38-py - update to 1.8.0-8
python38-six - update to 1.12.0-10
python38-cffi - update to 1.13.2-3
python38-numpy-doc - update to 1.17.3-6
python38-numpy-f2py - update to 1.17.3-6
python38-numpy - update to 1.17.3-6
python38-urllib3 - update to 1.25.7-5
python38-pyparsing - update to 2.4.5-3
Cloud Pak for Data - addressed in versions 2.5 patch 6, 3.0.1 patch 5
python38-babel - update to 2.7.0-11
python2.7 (Ubuntu package) - addressed in versions 2.7.3-0ubuntu3.18, 2.7.6-8ubuntu0.6+esm6, 2.7.12-1ubuntu0~16.04.12, 2.7.17-1~18.04ubuntu1.11, 2.7.18-1~20.04.1
python2.7-minimal (Ubuntu package) - addressed in versions 2.7.3-0ubuntu3.18, 2.7.6-8ubuntu0.6+esm6, 2.7.12-1ubuntu0~16.04.12, 2.7.17-1~18.04ubuntu1.11, 2.7.18-1~20.04.1
python2-devel - update to 2.7.18-2
python2 - update to 2.7.18-2
python2-help - update to 2.7.18-2
python2-tools - update to 2.7.18-2
python2-tkinter - update to 2.7.18-2
python2-debug - update to 2.7.18-2
python2-debuginfo - update to 2.7.18-2
python2-debugsource - update to 2.7.18-2
python2 - update to 2.7.18-2.fc31
python27 - update to 2.7.18-2.fc32
python38-cryptography - update to 2.8-3
python38-psycopg2-tests - update to 2.8.4-4
python38-psycopg2-doc - update to 2.8.4-4
python38-psycopg2 - update to 2.8.4-4
python38-idna - update to 2.8-6
python38-jinja2 - update to 2.10.3-5
python38-pycparser - update to 2.19-3
python38-requests - update to 2.22.0-9
python38-chardet - update to 3.0.4-19
PowerStore T - update to 3.2.1.0-1989710
PowerStore X - update to 3.2.1.0-1989710
python3.4-minimal (Ubuntu package) - update to 3.4.3-1ubuntu1~14.04.7+esm7
python3.4 (Ubuntu package) - update to 3.4.3-1ubuntu1~14.04.7+esm7
python34 - addressed in versions 3.4.10-6.el7, 3.4.10-11.fc32
python35 - addressed in versions 3.5.9-9.fc31, 3.5.9-9.fc32
python3.5 - addressed in versions 3.5.9-9.fc33, 3.5.9-9.fc34
python36 - addressed in versions 3.6.11-3.fc31, 3.6.11-3.fc32
python3-debug - update to 3.7.4-11
python3 - update to 3.7.4-11
python3-debuginfo - update to 3.7.4-11
python3-debugsource - update to 3.7.4-11
python3-devel - update to 3.7.4-11
python3-help - update to 3.7.4-11
python3 - addressed in versions 3.7.8-2.fc31, 3.8.5-1.fc32
python37 - update to 3.7.8-2.fc32
mingw-python3 - update to 3.8.3-3.fc32
python38 - update to 3.8.5-1.fc31
python3-docs - update to 3.8.5-1.fc32
python38-debug - update to 3.8.12-1.0.1
python38-devel - update to 3.8.12-1.0.1
python38-idle - update to 3.8.12-1.0.1
python38-libs - update to 3.8.12-1.0.1
python38 - update to 3.8.12-1.0.1
python38-test - update to 3.8.12-1.0.1
python38-tkinter - update to 3.8.12-1.0.1
python38-rpm-macros - update to 3.8.12-1.0.1
python39 - addressed in versions 3.9.0~b5-1.fc31, 3.9.0~b5-1.fc32
python3.10-minimal (Ubuntu package) - update to 3.10.12-1~22.04.4
python3.10 (Ubuntu package) - update to 3.10.12-1~22.04.4
python38-ply - update to 3.11-10
python3.12-minimal (Ubuntu package) - update to 3.12.0-1ubuntu0.1
python3.12 (Ubuntu package) - update to 3.12.0-1ubuntu0.1
Data Computing Appliance (DCA) - update to 4.3.0.0
python38-lxml - update to 4.4.1-7
python38-pytest - update to 4.6.6-3
python38-mod_wsgi - update to 4.6.8-3
python38-pyyaml - update to 5.4.1-1
python38-psutil - update to 5.6.4-4
python38-more-itertools - update to 7.2.0-5
python38-packaging - update to 19.2-3
python38-attrs - update to 19.3.0-3
python38-pip - update to 19.3.1-5
python38-pip-wheel - update to 19.3.1-5
Junos Space Security Director - update to 24.1R3
python38-setuptools - update to 41.6.0-5
python38-setuptools-wheel - update to 41.6.0-5
python38-pytz - update to 2019.3-3

External References

Related Security Bulletins