CVE-2015-20107 In Python (aka CPython) up to 3.10.8, the mailcap module does not add escape characters into commands discovered in the system mailcap file. This may allow attackers to inject shell commands into appl...
HighCVSS 7.6
EPSS 2.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
In Python (aka CPython) up to 3.10.8, the mailcap module does not add escape characters into commands discovered in the system mailcap file. This may allow attackers to inject shell commands into applications that call mailcap.findmatch with untrusted input (if they lack validation of user-provided filenames or arguments). The fix is also back-ported to 3.7, 3.8, 3.9
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ubuntu/python2.7(Ubuntu:22.04) | < 2.7.18-13ubuntu1.1 | 2.7.18-13ubuntu1.1 |
| ubuntu/python3.10(Ubuntu:22.04) | < 3.10.4-3ubuntu0.1 | 3.10.4-3ubuntu0.1 |
| debian/pypy3(Debian:12) | < 7.3.11+dfsg-1 | 7.3.11+dfsg-1 |
| debian/pypy3(Debian:13) | < 7.3.11+dfsg-1 | 7.3.11+dfsg-1 |
| debian/pypy3(Debian:14) | < 7.3.11+dfsg-1 | 7.3.11+dfsg-1 |
| Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP | >= V3.1.0, < V3.1.5 | V3.1.5 |
| Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP | >= V3.1.0, < V3.1.5 | V3.1.5 |
| Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP | >= V3.1.0, < V3.1.5 | V3.1.5 |
| alpine/python3(Alpine:v3.17) | < 3.10.5-r0 | 3.10.5-r0 |
| alpine/python3(Alpine:v3.18) | < 3.10.5-r0 | 3.10.5-r0 |
| alpine/python3(Alpine:v3.19) | < 3.10.5-r0 | 3.10.5-r0 |
| alpine/python3(Alpine:v3.20) | < 3.10.5-r0 | 3.10.5-r0 |
| alpine/python3(Alpine:v3.21) | < 3.10.5-r0 | 3.10.5-r0 |
| alpine/python3(Alpine:v3.22) | < 3.10.5-r0 | 3.10.5-r0 |
| alpine/python3(Alpine:v3.23) | < 3.10.5-r0 | 3.10.5-r0 |
| alpine/python3(Alpine:v3.24) | < 3.10.5-r0 | 3.10.5-r0 |
| python | >= 3.7.0, <= 3.7.15 | No fix listed |
| python | >= 3.8.0, <= 3.8.15 | No fix listed |
| python | >= 3.9.0, <= 3.9.15 | No fix listed |
| python | >= 3.10.0, < 3.10.8 | 3.10.8 |
| netapp active iq unified manager | All versions | No fix listed |
| netapp ontap select deploy administration utility | All versions | No fix listed |
| netapp snapcenter | All versions | No fix listed |
| fedoraproject fedora | = 35 | No fix listed |
| fedoraproject fedora | = 36 | No fix listed |
Show 1 more
| Product | Affected versions | Fixed in |
|---|---|---|
| fedoraproject fedora | = 37 | No fix listed |
References
- Ubuntu CVE tracker vendor-advisory
- USN-5519-1 vendor-advisory
- USN-5888-1 vendor-advisory
- USN-6891-1 vendor-advisory
- www.cve.org
- Debian Security Tracker CVE-2015-20107 vendor-advisory
- bugs.python.org exploit issue-tracking vendor-advisory
- github.com issue-tracking third-party-advisory
- security.netapp.com third-party-advisory
- FEDORA-2022-5ad25e3d3c vendor-advisory
- FEDORA-2022-cece1d07d9 vendor-advisory
- FEDORA-2022-2e1d1205cf vendor-advisory
- FEDORA-2022-4b0dfda810 vendor-advisory
- FEDORA-2022-1358cedf2d vendor-advisory
- FEDORA-2022-0be85556b4 vendor-advisory
- FEDORA-2022-a8e50dc83e vendor-advisory
- FEDORA-2022-4c788bdc40 vendor-advisory
- FEDORA-2022-9da5703d22 vendor-advisory
- FEDORA-2022-4a69d20cf4 vendor-advisory
- FEDORA-2022-5ea8aa7518 vendor-advisory
- FEDORA-2022-ec74ac4079 vendor-advisory
- FEDORA-2022-17a1bb7e78 vendor-advisory
- FEDORA-2022-dbe9a8f9ac vendor-advisory
- FEDORA-2022-9dd70781cb vendor-advisory
- FEDORA-2022-20e87fb0d1 vendor-advisory
- FEDORA-2022-9cd41b6709 vendor-advisory
- FEDORA-2022-d157a91e10 vendor-advisory
- FEDORA-2022-ce55d01569 vendor-advisory
- FEDORA-2022-b499f2a9c6 vendor-advisory
- FEDORA-2022-d1682fef04 vendor-advisory
- FEDORA-2022-79843dfb3c vendor-advisory
- python-security.readthedocs.io patch third-party-advisory
- GLSA-202305-02 vendor-advisory
- [debian-lts-announce] 20230524 [SECURITY] [DLA 3432-1] python2.7 security update mailing-list
- [debian-lts-announce] 20230630 [SECURITY] [DLA 3477-1] python3.7 security update mailing-list
- lists.debian.org
- cert-portal.siemens.com
- security.alpinelinux.org vendor-advisory