Test ID:	1.3.6.1.4.1.25623.1.0.118197
Category:	General
Title:	Python 2.x < 2.7.18, 3.x < 3.5.10, 3.6.x < 3.6.11, 3.7.x < 3.7.8, 3.8.x < 3.8.3 CRLF Injection Vulnerability (bpo-38576) - Windows
Summary:	Python is prone to a CRLF injection vulnerability.
Description:	Summary: Python is prone to a CRLF injection vulnerability. Vulnerability Insight: http.client allows to pass control characters like CRLF newlines which can be abused to inject HTTP headers. Affected Software/OS: Python 2.x prior to version 2.7.18, versions 3.x prior to 3.5.10, 3.6.x prior to 3.6.11, 3.7.x prior to 3.7.8 and 3.8.x prior to 3.8.3. Solution: The vendor has released updates. Please see the references for more information. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2019-18348 https://security.netapp.com/advisory/ntap-20191107-0004/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4X3HW5JRZ7GCPSR7UHJOLD7AWLTQCDVR/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/M34WOYCDKTDE5KLUACE2YIEH7D37KHRX/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JCPGLTTOBB3QEARDX4JOYURP6ELNNA2V/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UESGYI5XDAHJBATEZN3MHNDUBDH47AS6/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/A5NSAX4SC3V64PGZUPH7PRDLSON34Q5A/ https://bugs.python.org/issue30458#msg347282 https://bugzilla.redhat.com/show_bug.cgi?id=1727276 https://www.oracle.com/security-alerts/cpuoct2020.html https://lists.debian.org/debian-lts-announce/2020/07/msg00011.html SuSE Security Announcement: openSUSE-SU-2020:0696 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00041.html https://usn.ubuntu.com/4333-1/ https://usn.ubuntu.com/4333-2/
Copyright	Copyright (C) 2021 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.