BIT-python-2020-15523

See a problem?
Import Source
https://github.com/bitnami/vulndb/tree/main/data/python/BIT-python-2020-15523.json
JSON Data
https://api.osv.dev/v1/vulns/BIT-python-2020-15523
Aliases
Published
2024-03-06T11:07:56.206Z
Modified
2024-03-06T11:25:28.861Z
Summary
[none]
Details

In Python 3.6 through 3.6.10, 3.7 through 3.7.8, 3.8 through 3.8.4rc1, and 3.9 through 3.9.0b4 on Windows, a Trojan horse python3.dll might be used in cases where CPython is embedded in a native application. This occurs because python3X.dll may use an invalid search path for python3.dll loading (after Py_SetPath has been used). NOTE: this issue CANNOT occur when using python.exe from a standard (non-embedded) Python installation on Windows.

Database specific 
{
    "cpes": [
        "cpe:2.3:a:python:python:*:*:*:*:*:*:*:*",
        "cpe:2.3:a:python:python:3.8.4:rc1:*:*:*:*:*:*",
        "cpe:2.3:a:python:python:3.9.0:alpha1:*:*:*:*:*:*",
        "cpe:2.3:a:python:python:3.9.0:alpha2:*:*:*:*:*:*",
        "cpe:2.3:a:python:python:3.9.0:alpha3:*:*:*:*:*:*",
        "cpe:2.3:a:python:python:3.9.0:alpha4:*:*:*:*:*:*",
        "cpe:2.3:a:python:python:3.9.0:alpha5:*:*:*:*:*:*",
        "cpe:2.3:a:python:python:3.9.0:alpha6:*:*:*:*:*:*",
        "cpe:2.3:a:python:python:3.9.0:beta1:*:*:*:*:*:*",
        "cpe:2.3:a:python:python:3.9.0:beta2:*:*:*:*:*:*",
        "cpe:2.3:a:python:python:3.9.0:beta3:*:*:*:*:*:*",
        "cpe:2.3:a:python:python:3.9.0:beta4:*:*:*:*:*:*"
    ],
    "severity": "High"
}
References

Affected packages

Bitnami / python

Package

Name
python
Purl
pkg:bitnami/python

Severity

  • 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator

Affected ranges

Type
SEMVER
Events
Introduced
3.5.0
Fixed
3.5.10
Introduced
3.6.0
Fixed
3.6.12
Introduced
3.7.0
Fixed
3.7.9
Introduced
3.8.0
Fixed
3.8.4
Type
SEMVER
Events
Introduced
3.8.4-rc1
Last affected
3.8.4-rc1
Introduced
3.9.0-alpha1
Last affected
3.9.0-alpha1
Introduced
3.9.0-alpha2
Last affected
3.9.0-alpha2
Introduced
3.9.0-alpha3
Last affected
3.9.0-alpha3
Introduced
3.9.0-alpha4
Last affected
3.9.0-alpha4
Introduced
3.9.0-alpha5
Last affected
3.9.0-alpha5
Introduced
3.9.0-alpha6
Last affected
3.9.0-alpha6
Introduced
3.9.0-beta1
Last affected
3.9.0-beta1
Introduced
3.9.0-beta2
Last affected
3.9.0-beta2
Introduced
3.9.0-beta3
Last affected
3.9.0-beta3
Introduced
3.9.0-beta4
Last affected
3.9.0-beta4