Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-x7h3-nmjt-aud5
Summary
Multiple vulnerabilities have been found in Python, the worst of
    which could result in a Denial of Service condition.
Aliases
0
alias CVE-2019-9947
Fixed_packages
0
url pkg:deb/debian/python2.7@2.7.16-3?distro=bullseye
purl pkg:deb/debian/python2.7@2.7.16-3?distro=bullseye
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python2.7@2.7.16-3%3Fdistro=bullseye
1
url pkg:deb/debian/python2.7@2.7.18-8%2Bdeb11u1
purl pkg:deb/debian/python2.7@2.7.18-8%2Bdeb11u1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python2.7@2.7.18-8%252Bdeb11u1
2
url pkg:deb/debian/python2.7@2.7.18-8%2Bdeb11u1?distro=bullseye
purl pkg:deb/debian/python2.7@2.7.18-8%2Bdeb11u1?distro=bullseye
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python2.7@2.7.18-8%252Bdeb11u1%3Fdistro=bullseye
3
url pkg:ebuild/dev-lang/python@2.7.17
purl pkg:ebuild/dev-lang/python@2.7.17
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/dev-lang/python@2.7.17
4
url pkg:ebuild/dev-lang/python@3.5.7
purl pkg:ebuild/dev-lang/python@3.5.7
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/dev-lang/python@3.5.7
5
url pkg:ebuild/dev-lang/python@3.6.9
purl pkg:ebuild/dev-lang/python@3.6.9
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/dev-lang/python@3.6.9
6
url pkg:ebuild/dev-lang/python@3.7.4
purl pkg:ebuild/dev-lang/python@3.7.4
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/dev-lang/python@3.7.4
Affected_packages
0
url pkg:deb/debian/python2.7@2.7.3-6%2Bdeb7u2
purl pkg:deb/debian/python2.7@2.7.3-6%2Bdeb7u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1mw1-384y-huc7
1
vulnerability VCID-1taa-a9e4-tbc5
2
vulnerability VCID-2czu-wy37-qugf
3
vulnerability VCID-2shb-2cvn-dyd2
4
vulnerability VCID-3mu8-g6x3-effb
5
vulnerability VCID-4py6-hkzp-v3d4
6
vulnerability VCID-4q79-666d-rygx
7
vulnerability VCID-4z89-3tfk-pyge
8
vulnerability VCID-57c6-hx7f-efc6
9
vulnerability VCID-7jat-6ags-qbdr
10
vulnerability VCID-8aq9-8cf5-qbet
11
vulnerability VCID-8jfv-cqa8-7yb6
12
vulnerability VCID-9jj2-hsne-mbac
13
vulnerability VCID-9mcr-rmtb-mufj
14
vulnerability VCID-c97c-3177-wkhx
15
vulnerability VCID-dkxn-j9dr-sqbp
16
vulnerability VCID-dv5v-71b5-budp
17
vulnerability VCID-ez5b-fvw8-hkh3
18
vulnerability VCID-f5vu-k9rc-27fz
19
vulnerability VCID-g81p-pg7g-xfcf
20
vulnerability VCID-gfzb-b7tt-fkgz
21
vulnerability VCID-gkfp-ga1r-jkag
22
vulnerability VCID-hcq4-yq9k-jygb
23
vulnerability VCID-hgwh-tzsf-suc1
24
vulnerability VCID-j9s6-2y47-zbbt
25
vulnerability VCID-k18q-3e9y-ykgf
26
vulnerability VCID-mzd5-dwty-bqhf
27
vulnerability VCID-ppqx-qup8-sqbz
28
vulnerability VCID-tyk4-kazt-kydj
29
vulnerability VCID-ugfy-dufq-hfb2
30
vulnerability VCID-v84j-ugn9-w3c8
31
vulnerability VCID-vpwj-d49q-1uh8
32
vulnerability VCID-w6k8-js68-87g4
33
vulnerability VCID-w85n-mm5g-5yd1
34
vulnerability VCID-wq7w-nrar-ykde
35
vulnerability VCID-wxhp-wayg-qbd1
36
vulnerability VCID-x7h3-nmjt-aud5
37
vulnerability VCID-xv9p-nyha-xygv
38
vulnerability VCID-yqm8-fk44-4yhk
39
vulnerability VCID-z6kh-961g-duck
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python2.7@2.7.3-6%252Bdeb7u2
1
url pkg:deb/debian/python2.7@2.7.9-2
purl pkg:deb/debian/python2.7@2.7.9-2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1taa-a9e4-tbc5
1
vulnerability VCID-2czu-wy37-qugf
2
vulnerability VCID-2shb-2cvn-dyd2
3
vulnerability VCID-3mu8-g6x3-effb
4
vulnerability VCID-4py6-hkzp-v3d4
5
vulnerability VCID-4q79-666d-rygx
6
vulnerability VCID-4z89-3tfk-pyge
7
vulnerability VCID-57c6-hx7f-efc6
8
vulnerability VCID-7jat-6ags-qbdr
9
vulnerability VCID-9mcr-rmtb-mufj
10
vulnerability VCID-c97c-3177-wkhx
11
vulnerability VCID-dkxn-j9dr-sqbp
12
vulnerability VCID-dv5v-71b5-budp
13
vulnerability VCID-gfzb-b7tt-fkgz
14
vulnerability VCID-gkfp-ga1r-jkag
15
vulnerability VCID-hcq4-yq9k-jygb
16
vulnerability VCID-hgwh-tzsf-suc1
17
vulnerability VCID-j9s6-2y47-zbbt
18
vulnerability VCID-k18q-3e9y-ykgf
19
vulnerability VCID-ppqx-qup8-sqbz
20
vulnerability VCID-tyk4-kazt-kydj
21
vulnerability VCID-ugfy-dufq-hfb2
22
vulnerability VCID-v84j-ugn9-w3c8
23
vulnerability VCID-vpwj-d49q-1uh8
24
vulnerability VCID-w6k8-js68-87g4
25
vulnerability VCID-wq7w-nrar-ykde
26
vulnerability VCID-wxhp-wayg-qbd1
27
vulnerability VCID-x7h3-nmjt-aud5
28
vulnerability VCID-xv9p-nyha-xygv
29
vulnerability VCID-yqm8-fk44-4yhk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python2.7@2.7.9-2
2
url pkg:deb/debian/python2.7@2.7.9-2%2Bdeb8u1
purl pkg:deb/debian/python2.7@2.7.9-2%2Bdeb8u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1taa-a9e4-tbc5
1
vulnerability VCID-2czu-wy37-qugf
2
vulnerability VCID-2shb-2cvn-dyd2
3
vulnerability VCID-3mu8-g6x3-effb
4
vulnerability VCID-4py6-hkzp-v3d4
5
vulnerability VCID-4q79-666d-rygx
6
vulnerability VCID-4z89-3tfk-pyge
7
vulnerability VCID-57c6-hx7f-efc6
8
vulnerability VCID-7jat-6ags-qbdr
9
vulnerability VCID-9mcr-rmtb-mufj
10
vulnerability VCID-c97c-3177-wkhx
11
vulnerability VCID-dkxn-j9dr-sqbp
12
vulnerability VCID-dv5v-71b5-budp
13
vulnerability VCID-gfzb-b7tt-fkgz
14
vulnerability VCID-gkfp-ga1r-jkag
15
vulnerability VCID-hcq4-yq9k-jygb
16
vulnerability VCID-hgwh-tzsf-suc1
17
vulnerability VCID-j9s6-2y47-zbbt
18
vulnerability VCID-k18q-3e9y-ykgf
19
vulnerability VCID-ppqx-qup8-sqbz
20
vulnerability VCID-tyk4-kazt-kydj
21
vulnerability VCID-ugfy-dufq-hfb2
22
vulnerability VCID-v84j-ugn9-w3c8
23
vulnerability VCID-vpwj-d49q-1uh8
24
vulnerability VCID-w6k8-js68-87g4
25
vulnerability VCID-wq7w-nrar-ykde
26
vulnerability VCID-wxhp-wayg-qbd1
27
vulnerability VCID-x7h3-nmjt-aud5
28
vulnerability VCID-xv9p-nyha-xygv
29
vulnerability VCID-yqm8-fk44-4yhk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python2.7@2.7.9-2%252Bdeb8u1
3
url pkg:deb/debian/python2.7@2.7.13-2%2Bdeb9u3
purl pkg:deb/debian/python2.7@2.7.13-2%2Bdeb9u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1taa-a9e4-tbc5
1
vulnerability VCID-2czu-wy37-qugf
2
vulnerability VCID-2shb-2cvn-dyd2
3
vulnerability VCID-4py6-hkzp-v3d4
4
vulnerability VCID-4q79-666d-rygx
5
vulnerability VCID-4z89-3tfk-pyge
6
vulnerability VCID-57c6-hx7f-efc6
7
vulnerability VCID-7jat-6ags-qbdr
8
vulnerability VCID-9mcr-rmtb-mufj
9
vulnerability VCID-dkxn-j9dr-sqbp
10
vulnerability VCID-dv5v-71b5-budp
11
vulnerability VCID-gfzb-b7tt-fkgz
12
vulnerability VCID-gkfp-ga1r-jkag
13
vulnerability VCID-hcq4-yq9k-jygb
14
vulnerability VCID-j9s6-2y47-zbbt
15
vulnerability VCID-k18q-3e9y-ykgf
16
vulnerability VCID-ppqx-qup8-sqbz
17
vulnerability VCID-tyk4-kazt-kydj
18
vulnerability VCID-v84j-ugn9-w3c8
19
vulnerability VCID-vpwj-d49q-1uh8
20
vulnerability VCID-w6k8-js68-87g4
21
vulnerability VCID-wq7w-nrar-ykde
22
vulnerability VCID-wxhp-wayg-qbd1
23
vulnerability VCID-x7h3-nmjt-aud5
24
vulnerability VCID-xv9p-nyha-xygv
25
vulnerability VCID-yqm8-fk44-4yhk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python2.7@2.7.13-2%252Bdeb9u3
4
url pkg:deb/debian/python2.7@2.7.16-2%2Bdeb10u1
purl pkg:deb/debian/python2.7@2.7.16-2%2Bdeb10u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1taa-a9e4-tbc5
1
vulnerability VCID-2czu-wy37-qugf
2
vulnerability VCID-2shb-2cvn-dyd2
3
vulnerability VCID-4q79-666d-rygx
4
vulnerability VCID-4z89-3tfk-pyge
5
vulnerability VCID-57c6-hx7f-efc6
6
vulnerability VCID-9mcr-rmtb-mufj
7
vulnerability VCID-dkxn-j9dr-sqbp
8
vulnerability VCID-dv5v-71b5-budp
9
vulnerability VCID-gkfp-ga1r-jkag
10
vulnerability VCID-ppqx-qup8-sqbz
11
vulnerability VCID-tyk4-kazt-kydj
12
vulnerability VCID-v84j-ugn9-w3c8
13
vulnerability VCID-vpwj-d49q-1uh8
14
vulnerability VCID-w6k8-js68-87g4
15
vulnerability VCID-x7h3-nmjt-aud5
16
vulnerability VCID-xv9p-nyha-xygv
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python2.7@2.7.16-2%252Bdeb10u1
5
url pkg:rpm/redhat/python@2.7.5-63?arch=el7_4
purl pkg:rpm/redhat/python@2.7.5-63?arch=el7_4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4py6-hkzp-v3d4
1
vulnerability VCID-7jat-6ags-qbdr
2
vulnerability VCID-9mcr-rmtb-mufj
3
vulnerability VCID-j9s6-2y47-zbbt
4
vulnerability VCID-k18q-3e9y-ykgf
5
vulnerability VCID-x7h3-nmjt-aud5
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/python@2.7.5-63%3Farch=el7_4
6
url pkg:rpm/redhat/python@2.7.5-74?arch=el7_5
purl pkg:rpm/redhat/python@2.7.5-74?arch=el7_5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4py6-hkzp-v3d4
1
vulnerability VCID-7jat-6ags-qbdr
2
vulnerability VCID-9mcr-rmtb-mufj
3
vulnerability VCID-j9s6-2y47-zbbt
4
vulnerability VCID-k18q-3e9y-ykgf
5
vulnerability VCID-x7h3-nmjt-aud5
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/python@2.7.5-74%3Farch=el7_5
7
url pkg:rpm/redhat/python@2.7.5-83?arch=el7_6
purl pkg:rpm/redhat/python@2.7.5-83?arch=el7_6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7jat-6ags-qbdr
1
vulnerability VCID-9mcr-rmtb-mufj
2
vulnerability VCID-k18q-3e9y-ykgf
3
vulnerability VCID-x7h3-nmjt-aud5
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/python@2.7.5-83%3Farch=el7_6
8
url pkg:rpm/redhat/python@2.7.5-86?arch=el7
purl pkg:rpm/redhat/python@2.7.5-86?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7jat-6ags-qbdr
1
vulnerability VCID-9mcr-rmtb-mufj
2
vulnerability VCID-k18q-3e9y-ykgf
3
vulnerability VCID-x7h3-nmjt-aud5
4
vulnerability VCID-yqm8-fk44-4yhk
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/python@2.7.5-86%3Farch=el7
9
url pkg:rpm/redhat/python27-python@2.7.16-4?arch=el7
purl pkg:rpm/redhat/python27-python@2.7.16-4?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4py6-hkzp-v3d4
1
vulnerability VCID-6fxc-s6ht-x7ht
2
vulnerability VCID-7jat-6ags-qbdr
3
vulnerability VCID-9mcr-rmtb-mufj
4
vulnerability VCID-j9s6-2y47-zbbt
5
vulnerability VCID-x7h3-nmjt-aud5
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/python27-python@2.7.16-4%3Farch=el7
10
url pkg:rpm/redhat/python27-python@2.7.16-4?arch=el6
purl pkg:rpm/redhat/python27-python@2.7.16-4?arch=el6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4py6-hkzp-v3d4
1
vulnerability VCID-6fxc-s6ht-x7ht
2
vulnerability VCID-7jat-6ags-qbdr
3
vulnerability VCID-9mcr-rmtb-mufj
4
vulnerability VCID-j9s6-2y47-zbbt
5
vulnerability VCID-x7h3-nmjt-aud5
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/python27-python@2.7.16-4%3Farch=el6
11
url pkg:rpm/redhat/python27-python-jinja2@2.6-12?arch=el6
purl pkg:rpm/redhat/python27-python-jinja2@2.6-12?arch=el6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4py6-hkzp-v3d4
1
vulnerability VCID-6fxc-s6ht-x7ht
2
vulnerability VCID-7jat-6ags-qbdr
3
vulnerability VCID-9mcr-rmtb-mufj
4
vulnerability VCID-j9s6-2y47-zbbt
5
vulnerability VCID-x7h3-nmjt-aud5
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/python27-python-jinja2@2.6-12%3Farch=el6
12
url pkg:rpm/redhat/python27-python-jinja2@2.6-15?arch=el7
purl pkg:rpm/redhat/python27-python-jinja2@2.6-15?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4py6-hkzp-v3d4
1
vulnerability VCID-6fxc-s6ht-x7ht
2
vulnerability VCID-7jat-6ags-qbdr
3
vulnerability VCID-9mcr-rmtb-mufj
4
vulnerability VCID-j9s6-2y47-zbbt
5
vulnerability VCID-x7h3-nmjt-aud5
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/python27-python-jinja2@2.6-15%3Farch=el7
13
url pkg:rpm/redhat/python3@3.6.8-15.1?arch=el8
purl pkg:rpm/redhat/python3@3.6.8-15.1?arch=el8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9mcr-rmtb-mufj
1
vulnerability VCID-k18q-3e9y-ykgf
2
vulnerability VCID-x7h3-nmjt-aud5
3
vulnerability VCID-yqm8-fk44-4yhk
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/python3@3.6.8-15.1%3Farch=el8
14
url pkg:rpm/redhat/rh-python36-python@3.6.9-2?arch=el6
purl pkg:rpm/redhat/rh-python36-python@3.6.9-2?arch=el6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-34fd-g6ss-t3fj
1
vulnerability VCID-4py6-hkzp-v3d4
2
vulnerability VCID-7jat-6ags-qbdr
3
vulnerability VCID-9mcr-rmtb-mufj
4
vulnerability VCID-j9s6-2y47-zbbt
5
vulnerability VCID-k18q-3e9y-ykgf
6
vulnerability VCID-ppqx-qup8-sqbz
7
vulnerability VCID-x7h3-nmjt-aud5
8
vulnerability VCID-xv9p-nyha-xygv
9
vulnerability VCID-yqm8-fk44-4yhk
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/rh-python36-python@3.6.9-2%3Farch=el6
15
url pkg:rpm/redhat/rh-python36-python@3.6.9-2?arch=el7
purl pkg:rpm/redhat/rh-python36-python@3.6.9-2?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-34fd-g6ss-t3fj
1
vulnerability VCID-4py6-hkzp-v3d4
2
vulnerability VCID-7jat-6ags-qbdr
3
vulnerability VCID-9mcr-rmtb-mufj
4
vulnerability VCID-j9s6-2y47-zbbt
5
vulnerability VCID-k18q-3e9y-ykgf
6
vulnerability VCID-ppqx-qup8-sqbz
7
vulnerability VCID-x7h3-nmjt-aud5
8
vulnerability VCID-xv9p-nyha-xygv
9
vulnerability VCID-yqm8-fk44-4yhk
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/rh-python36-python@3.6.9-2%3Farch=el7
References
0
reference_url http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00062.html
reference_id
reference_type
scores
url http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00062.html
1
reference_url http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00063.html
reference_id
reference_type
scores
url http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00063.html
2
reference_url http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html
reference_id
reference_type
scores
url http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html
3
reference_url https://access.redhat.com/errata/RHSA-2019:1260
reference_id
reference_type
scores
url https://access.redhat.com/errata/RHSA-2019:1260
4
reference_url https://access.redhat.com/errata/RHSA-2019:3335
reference_id
reference_type
scores
url https://access.redhat.com/errata/RHSA-2019:3335
5
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9947.json
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9947.json
6
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-9947
reference_id
reference_type
scores
0
value 0.01161
scoring_system epss
scoring_elements 0.78546
published_at 2026-04-01T12:55:00Z
1
value 0.01161
scoring_system epss
scoring_elements 0.78596
published_at 2026-04-13T12:55:00Z
2
value 0.01161
scoring_system epss
scoring_elements 0.78598
published_at 2026-04-09T12:55:00Z
3
value 0.01161
scoring_system epss
scoring_elements 0.78623
published_at 2026-04-11T12:55:00Z
4
value 0.01161
scoring_system epss
scoring_elements 0.78605
published_at 2026-04-12T12:55:00Z
5
value 0.01161
scoring_system epss
scoring_elements 0.78553
published_at 2026-04-02T12:55:00Z
6
value 0.01161
scoring_system epss
scoring_elements 0.78584
published_at 2026-04-04T12:55:00Z
7
value 0.01161
scoring_system epss
scoring_elements 0.78566
published_at 2026-04-07T12:55:00Z
8
value 0.01161
scoring_system epss
scoring_elements 0.78592
published_at 2026-04-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-9947
7
reference_url https://bugs.python.org/issue35906
reference_id
reference_type
scores
url https://bugs.python.org/issue35906
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9947
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9947
9
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
10
reference_url https://lists.debian.org/debian-lts-announce/2019/06/msg00022.html
reference_id
reference_type
scores
url https://lists.debian.org/debian-lts-announce/2019/06/msg00022.html
11
reference_url https://lists.debian.org/debian-lts-announce/2019/06/msg00023.html
reference_id
reference_type
scores
url https://lists.debian.org/debian-lts-announce/2019/06/msg00023.html
12
reference_url https://lists.debian.org/debian-lts-announce/2019/06/msg00026.html
reference_id
reference_type
scores
url https://lists.debian.org/debian-lts-announce/2019/06/msg00026.html
13
reference_url https://lists.debian.org/debian-lts-announce/2020/07/msg00011.html
reference_id
reference_type
scores
url https://lists.debian.org/debian-lts-announce/2020/07/msg00011.html
14
reference_url https://lists.debian.org/debian-lts-announce/2020/08/msg00034.html
reference_id
reference_type
scores
url https://lists.debian.org/debian-lts-announce/2020/08/msg00034.html
15
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JMWSKTNOHSUOT3L25QFJAVCFYZX46FYK/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JMWSKTNOHSUOT3L25QFJAVCFYZX46FYK/
16
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JXASHCDD4PQFKTMKQN4YOP5ZH366ABN4/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JXASHCDD4PQFKTMKQN4YOP5ZH366ABN4/
17
reference_url https://security.netapp.com/advisory/ntap-20190404-0004/
reference_id
reference_type
scores
url https://security.netapp.com/advisory/ntap-20190404-0004/
18
reference_url http://www.openwall.com/lists/oss-security/2021/02/04/2
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2021/02/04/2
19
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1695572
reference_id 1695572
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1695572
20
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:python:python:*:*:*:*:*:*:*:*
reference_id cpe:2.3:a:python:python:*:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:python:python:*:*:*:*:*:*:*:*
21
reference_url https://nvd.nist.gov/vuln/detail/CVE-2019-9947
reference_id CVE-2019-9947
reference_type
scores
0
value 4.3
scoring_system cvssv2
scoring_elements AV:N/AC:M/Au:N/C:N/I:P/A:N
1
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
url https://nvd.nist.gov/vuln/detail/CVE-2019-9947
22
reference_url https://security.gentoo.org/glsa/202003-26
reference_id GLSA-202003-26
reference_type
scores
url https://security.gentoo.org/glsa/202003-26
23
reference_url https://access.redhat.com/errata/RHSA-2019:2030
reference_id RHSA-2019:2030
reference_type
scores
url https://access.redhat.com/errata/RHSA-2019:2030
24
reference_url https://access.redhat.com/errata/RHSA-2019:3520
reference_id RHSA-2019:3520
reference_type
scores
url https://access.redhat.com/errata/RHSA-2019:3520
25
reference_url https://access.redhat.com/errata/RHSA-2019:3725
reference_id RHSA-2019:3725
reference_type
scores
url https://access.redhat.com/errata/RHSA-2019:3725
26
reference_url https://access.redhat.com/errata/RHSA-2020:1268
reference_id RHSA-2020:1268
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1268
27
reference_url https://access.redhat.com/errata/RHSA-2020:1346
reference_id RHSA-2020:1346
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1346
28
reference_url https://access.redhat.com/errata/RHSA-2020:1462
reference_id RHSA-2020:1462
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:1462
29
reference_url https://usn.ubuntu.com/4127-1/
reference_id USN-4127-1
reference_type
scores
url https://usn.ubuntu.com/4127-1/
30
reference_url https://usn.ubuntu.com/4127-2/
reference_id USN-4127-2
reference_type
scores
url https://usn.ubuntu.com/4127-2/
31
reference_url https://usn.ubuntu.com/6891-1/
reference_id USN-6891-1
reference_type
scores
url https://usn.ubuntu.com/6891-1/
Weaknesses
0
cwe_id 113
name Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting')
description The product receives data from an HTTP agent/component (e.g., web server, proxy, browser, etc.), but it does not neutralize or incorrectly neutralizes CR and LF characters before the data is included in outgoing HTTP headers.
1
cwe_id 93
name Improper Neutralization of CRLF Sequences ('CRLF Injection')
description The product uses CRLF (carriage return line feeds) as a special element, e.g. to separate lines or records, but it does not neutralize or incorrectly neutralizes CRLF sequences from inputs.
Exploits
Severity_range_score4.3 - 6.5
Exploitability0.5
Weighted_severity5.9
Risk_score3.0
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-x7h3-nmjt-aud5