Home

CVE-2019-9674

Description

Lib/zipfile.py in Python through 3.7.2 allows remote attackers to cause a denial of service (resource consumption) via a ZIP bomb.

Risk Information

Base Score
7.5
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
1.265

Associated Vulnerability

VulnerabilityOS Platform
SUSE-SU-2020:0557-1(SUSE Linux Enterprise Server 12-SP5 ) libpython3_6m1_0-3.6.10-4.6.1.x86_64.rpmLinux
SUSE-SU-2020:0557-1(SUSE Linux Enterprise Server 12-SP5 ) libpython3_6m1_0-debuginfo-3.6.10-4.6.1.x86_64.rpmLinux
SUSE-SU-2020:1524-1(SUSE Linux Enterprise Server 12-SP5 ) libpython2_7-1_0-2.7.17-28.42.1.x86_64.rpmLinux
SUSE-SU-2020:1524-1(SUSE Linux Enterprise Server 12-SP4 ) libpython2_7-1_0-2.7.17-28.42.1.x86_64_SP4.rpmLinux
SUSE-SU-2020:1524-1(SUSE Linux Enterprise Server 12-SP4 ) libpython2_7-1_0-32bit-2.7.17-28.42.1.x86_64.rpmLinux
SUSE-SU-2020:1524-1(SUSE Linux Enterprise Server 12-SP5 ) libpython2_7-1_0-32bit-2.7.17-28.42.1.x86_64_SP5.rpmLinux
SUSE-SU-2020:1524-1(SUSE Linux Enterprise Server 12-SP5 ) libpython2_7-1_0-debuginfo-2.7.17-28.42.1.x86_64.rpmLinux
SUSE-SU-2020:1524-1(SUSE Linux Enterprise Server 12-SP5 ) libpython2_7-1_0-debuginfo-32bit-2.7.17-28.42.1.x86_64.rpmLinux
SUSE-SU-2020:1524-1(SUSE Linux Enterprise Server 12-SP4 ) libpython2_7-1_0-debuginfo-2.7.17-28.42.1.x86_64_SP4.rpmLinux
SUSE-SU-2020:1524-1(SUSE Linux Enterprise Server 12-SP4 ) libpython2_7-1_0-debuginfo-32bit-2.7.17-28.42.1.x86_64_SP4.rpmLinux
SUSE-SU-2020:1524-1(SUSE Linux Enterprise Server 12-SP4 ) python-2.7.17-28.42.1.x86_64.rpmLinux
SUSE-SU-2020:1524-1(SUSE Linux Enterprise Server 12-SP5 ) python-2.7.17-28.42.1.x86_64_SP5.rpmLinux
SUSE-SU-2020:1524-1(SUSE Linux Enterprise Server 12-SP5 ) python-32bit-2.7.17-28.42.1.x86_64.rpmLinux
SUSE-SU-2020:1524-1(SUSE Linux Enterprise Server 12-SP4 ) python-32bit-2.7.17-28.42.1.x86_64_SP4.rpmLinux
SUSE-SU-2020:1524-1(SUSE Linux Enterprise Server 12-SP4 ) python-base-2.7.17-28.42.1.x86_64.rpmLinux
SUSE-SU-2020:1524-1(SUSE Linux Enterprise Server 12-SP4 ) python-base-32bit-2.7.17-28.42.1.x86_64.rpmLinux
SUSE-SU-2020:1524-1(SUSE Linux Enterprise Server 12-SP5 ) python-base-2.7.17-28.42.1.x86_64_SP5.rpmLinux
SUSE-SU-2020:1524-1(SUSE Linux Enterprise Server 12-SP4 ) python-base-debuginfo-2.7.17-28.42.1.x86_64.rpmLinux
SUSE-SU-2020:1524-1(SUSE Linux Enterprise Server 12-SP5 ) python-base-32bit-2.7.17-28.42.1.x86_64_SP5.rpmLinux
SUSE-SU-2020:1524-1(SUSE Linux Enterprise Server 12-SP4 ) python-base-debuginfo-32bit-2.7.17-28.42.1.x86_64.rpmLinux
SUSE-SU-2020:1524-1(SUSE Linux Enterprise Server 12-SP4 ) python-base-debugsource-2.7.17-28.42.1.x86_64.rpmLinux
SUSE-SU-2020:1524-1(SUSE Linux Enterprise Server 12-SP5 ) python-base-debuginfo-2.7.17-28.42.1.x86_64_SP5.rpmLinux
SUSE-SU-2020:1524-1(SUSE Linux Enterprise Server 12-SP4 ) python-curses-2.7.17-28.42.1.x86_64.rpmLinux
SUSE-SU-2020:1524-1(SUSE Linux Enterprise Server 12-SP5 ) python-base-debuginfo-32bit-2.7.17-28.42.1.x86_64_SP5.rpmLinux
SUSE-SU-2020:1524-1(SUSE Linux Enterprise Server 12-SP4 ) python-curses-debuginfo-2.7.17-28.42.1.x86_64.rpmLinux
SUSE-SU-2020:1524-1(SUSE Linux Enterprise Server 12-SP4 ) python-debuginfo-2.7.17-28.42.1.x86_64.rpmLinux
SUSE-SU-2020:1524-1(SUSE Linux Enterprise Server 12-SP4 ) python-debuginfo-32bit-2.7.17-28.42.1.x86_64.rpmLinux
SUSE-SU-2020:1524-1(SUSE Linux Enterprise Server 12-SP5 ) python-base-debugsource-2.7.17-28.42.1.x86_64_SP5.rpmLinux
SUSE-SU-2020:1524-1(SUSE Linux Enterprise Server 12-SP4 ) python-debugsource-2.7.17-28.42.1.x86_64.rpmLinux
SUSE-SU-2020:1524-1(SUSE Linux Enterprise Server 12-SP4 ) python-demo-2.7.17-28.42.1.x86_64.rpmLinux
SUSE-SU-2020:1524-1(SUSE Linux Enterprise Server 12-SP5 ) python-curses-2.7.17-28.42.1.x86_64_SP5.rpmLinux
SUSE-SU-2020:1524-1(SUSE Linux Enterprise Server 12-SP4 ) python-devel-2.7.17-28.42.1.x86_64.rpmLinux
SUSE-SU-2020:1524-1(SUSE Linux Enterprise Server 12-SP4 ) python-doc-2.7.17-28.42.1.noarch.rpmLinux
SUSE-SU-2020:1524-1(SUSE Linux Enterprise Server 12-SP4 ) python-doc-pdf-2.7.17-28.42.1.noarch.rpmLinux
SUSE-SU-2020:1524-1(SUSE Linux Enterprise Server 12-SP5 ) python-curses-debuginfo-2.7.17-28.42.1.x86_64_SP5.rpmLinux
SUSE-SU-2020:1524-1(SUSE Linux Enterprise Server 12-SP4 ) python-gdbm-2.7.17-28.42.1.x86_64.rpmLinux
SUSE-SU-2020:1524-1(SUSE Linux Enterprise Server 12-SP4 ) python-gdbm-debuginfo-2.7.17-28.42.1.x86_64.rpmLinux
SUSE-SU-2020:1524-1(SUSE Linux Enterprise Server 12-SP5 ) python-debuginfo-2.7.17-28.42.1.x86_64_SP5.rpmLinux
SUSE-SU-2020:1524-1(SUSE Linux Enterprise Server 12-SP4 ) python-idle-2.7.17-28.42.1.x86_64.rpmLinux
SUSE-SU-2020:1524-1(SUSE Linux Enterprise Server 12-SP4 ) python-rpm-macros-20200207.5feb6c1-3.19.1.noarch.rpmLinux
SUSE-SU-2020:1524-1(SUSE Linux Enterprise Server 12-SP5 ) python-debuginfo-32bit-2.7.17-28.42.1.x86_64_SP5.rpmLinux
SUSE-SU-2020:1524-1(SUSE Linux Enterprise Server 12-SP4 ) python-tk-2.7.17-28.42.1.x86_64.rpmLinux
SUSE-SU-2020:1524-1(SUSE Linux Enterprise Server 12-SP5 ) python-debugsource-2.7.17-28.42.1.x86_64_SP5.rpmLinux
SUSE-SU-2020:1524-1(SUSE Linux Enterprise Server 12-SP4 ) python-tk-debuginfo-2.7.17-28.42.1.x86_64.rpmLinux
SUSE-SU-2020:1524-1(SUSE Linux Enterprise Server 12-SP5 ) python-demo-2.7.17-28.42.1.x86_64_SP5.rpmLinux
SUSE-SU-2020:1524-1(SUSE Linux Enterprise Server 12-SP4 ) python-xml-2.7.17-28.42.1.x86_64.rpmLinux
SUSE-SU-2020:1524-1(SUSE Linux Enterprise Server 12-SP5 ) python-devel-2.7.17-28.42.1.x86_64_SP5.rpmLinux
SUSE-SU-2020:1524-1(SUSE Linux Enterprise Server 12-SP5 ) python-doc-2.7.17-28.42.1.noarch_SP5.rpmLinux
SUSE-SU-2020:1524-1(SUSE Linux Enterprise Server 12-SP4 ) python-xml-debuginfo-2.7.17-28.42.1.x86_64.rpmLinux
SUSE-SU-2020:1524-1(SUSE Linux Enterprise Server 12-SP5 ) python-doc-pdf-2.7.17-28.42.1.noarch_SP5.rpmLinux
SUSE-SU-2020:1524-1(SUSE Linux Enterprise Server 12-SP4 ) shared-python-startup-0.1-1.3.1.noarch.rpmLinux
SUSE-SU-2020:1524-1(SUSE Linux Enterprise Server 12-SP5 ) python-gdbm-2.7.17-28.42.1.x86_64_SP5.rpmLinux
SUSE-SU-2020:1524-1(SUSE Linux Enterprise Server 12-SP5 ) python-gdbm-debuginfo-2.7.17-28.42.1.x86_64_SP5.rpmLinux
SUSE-SU-2020:1524-1(SUSE Linux Enterprise Server 12-SP5 ) python-idle-2.7.17-28.42.1.x86_64_SP5.rpmLinux
SUSE-SU-2020:1524-1(SUSE Linux Enterprise Server 12-SP5 ) python-rpm-macros-20200207.5feb6c1-3.19.1.noarch_SP5.rpmLinux
SUSE-SU-2020:1524-1(SUSE Linux Enterprise Server 12-SP5 ) python-tk-2.7.17-28.42.1.x86_64_SP5.rpmLinux
SUSE-SU-2020:1524-1(SUSE Linux Enterprise Server 12-SP5 ) python-tk-debuginfo-2.7.17-28.42.1.x86_64_SP5.rpmLinux
SUSE-SU-2020:1524-1(SUSE Linux Enterprise Server 12-SP5 ) python-xml-2.7.17-28.42.1.x86_64_SP5.rpmLinux
SUSE-SU-2020:1524-1(SUSE Linux Enterprise Server 12-SP5 ) python-xml-debuginfo-2.7.17-28.42.1.x86_64_SP5.rpmLinux
SUSE-SU-2020:1524-1(SUSE Linux Enterprise Server 12-SP5 ) shared-python-startup-0.1-1.3.1.noarch_SP5.rpmLinux
Interactive high-level object-oriented language (version 3.8) (USN-4428-1) python2.7_2.7.17-1~18.04ubuntu1.1_i386.debLinux
Interactive high-level object-oriented language (version 3.8) (USN-4428-1) python2.7_2.7.17-1~18.04ubuntu1.1_amd64.debLinux
Interactive high-level object-oriented language (version 3.8) (USN-4428-1) python2.7_2.7.12-1ubuntu0~16.04.12_i386.debLinux
Interactive high-level object-oriented language (version 3.8) (USN-4428-1) python2.7_2.7.12-1ubuntu0~16.04.12_amd64.debLinux
Interactive high-level object-oriented language (version 3.8) (USN-4428-1) python3.5_3.5.2-2ubuntu0~16.04.11_i386.debLinux
Interactive high-level object-oriented language (version 3.8) (USN-4428-1) python3.5_3.5.2-2ubuntu0~16.04.11_amd64.debLinux
Interactive high-level object-oriented language (version 3.8) (USN-4428-1) python3.6_3.6.9-1~18.04ubuntu1.1_i386.debLinux
Interactive high-level object-oriented language (version 3.8) (USN-4428-1) python3.6_3.6.9-1~18.04ubuntu1.1_amd64.debLinux
Interactive high-level object-oriented language (version 3.8) (USN-4428-1) python3.8_3.8.2-1ubuntu1.2_i386.debLinux
Interactive high-level object-oriented language (version 3.8) (USN-4428-1) python3.8_3.8.2-1ubuntu1.2_amd64.debLinux
Interactive high-level object-oriented language (version 3.8) (USN-4428-1) python2.7-minimal_2.7.17-1~18.04ubuntu1.1_i386.debLinux
Interactive high-level object-oriented language (version 3.8) (USN-4428-1) python2.7-minimal_2.7.17-1~18.04ubuntu1.1_amd64.debLinux
Interactive high-level object-oriented language (version 3.8) (USN-4428-1) python2.7-minimal_2.7.12-1ubuntu0~16.04.12_i386.debLinux
Interactive high-level object-oriented language (version 3.8) (USN-4428-1) python2.7-minimal_2.7.12-1ubuntu0~16.04.12_amd64.debLinux
Interactive high-level object-oriented language (version 3.8) (USN-4428-1) python3.5-minimal_3.5.2-2ubuntu0~16.04.11_i386.debLinux
Interactive high-level object-oriented language (version 3.8) (USN-4428-1) python3.5-minimal_3.5.2-2ubuntu0~16.04.11_amd64.debLinux
Interactive high-level object-oriented language (version 3.8) (USN-4428-1) python3.6-minimal_3.6.9-1~18.04ubuntu1.1_i386.debLinux
Interactive high-level object-oriented language (version 3.8) (USN-4428-1) python3.6-minimal_3.6.9-1~18.04ubuntu1.1_amd64.debLinux
Interactive high-level object-oriented language (version 3.8) (USN-4428-1) python3.8-minimal_3.8.2-1ubuntu1.2_i386.debLinux
Interactive high-level object-oriented language (version 3.8) (USN-4428-1) python3.8-minimal_3.8.2-1ubuntu1.2_amd64.debLinux
An interactive high-level object-oriented language (USN-4754-3) python2.7_2.7.18-1~20.04.1_i386.debLinux
An interactive high-level object-oriented language (USN-4754-3) python2.7_2.7.18-1~20.04.1_amd64.debLinux
An interactive high-level object-oriented language (USN-4754-3) python3.7_3.7.5-2~18.04.4_i386.debLinux
An interactive high-level object-oriented language (USN-4754-3) python3.7_3.7.5-2~18.04.4_amd64.debLinux
An interactive high-level object-oriented language (USN-4754-3) python3.8_3.8.0-3~18.04.1_i386.debLinux
An interactive high-level object-oriented language (USN-4754-3) python3.8_3.8.0-3~18.04.1_amd64.debLinux
An interactive high-level object-oriented language (USN-4754-3) python2.7-minimal_2.7.18-1~20.04.1_i386.debLinux
An interactive high-level object-oriented language (USN-4754-3) python2.7-minimal_2.7.18-1~20.04.1_amd64.debLinux
An interactive high-level object-oriented language (USN-4754-3) python3.7-minimal_3.7.5-2~18.04.4_i386.debLinux
An interactive high-level object-oriented language (USN-4754-3) python3.7-minimal_3.7.5-2~18.04.4_amd64.debLinux
An interactive high-level object-oriented language (USN-4754-3) python3.8-minimal_3.8.0-3~18.04.1_i386.debLinux
An interactive high-level object-oriented language (USN-4754-3) python3.8-minimal_3.8.0-3~18.04.1_amd64.debLinux
An interactive high-level object-oriented language (USN-6891-1) python3.10_3.10.12-1~22.04.4_amd64.debLinux
An interactive high-level object-oriented language (USN-6891-1) python3.10_3.10.12-1~22.04.4_i386.debLinux
An interactive high-level object-oriented language (USN-6891-1) python3.10-minimal_3.10.12-1~22.04.4_amd64.debLinux
An interactive high-level object-oriented language (USN-6891-1) python3.10-minimal_3.10.12-1~22.04.4_i386.debLinux
An interactive high-level object-oriented language (USN-6891-1) python3.11_3.11.6-3ubuntu0.1_amd64.debLinux
An interactive high-level object-oriented language (USN-6891-1) python3.11_3.11.6-3ubuntu0.1_i386.debLinux
An interactive high-level object-oriented language (USN-6891-1) python3.11-minimal_3.11.6-3ubuntu0.1_amd64.debLinux
An interactive high-level object-oriented language (USN-6891-1) python3.11-minimal_3.11.6-3ubuntu0.1_i386.debLinux
An interactive high-level object-oriented language (USN-6891-1) python3.12_3.12.0-1ubuntu0.1_amd64.debLinux
An interactive high-level object-oriented language (USN-6891-1) python3.12_3.12.0-1ubuntu0.1_i386.debLinux
An interactive high-level object-oriented language (USN-6891-1) python3.12-minimal_3.12.0-1ubuntu0.1_amd64.debLinux
An interactive high-level object-oriented language (USN-6891-1) python3.12-minimal_3.12.0-1ubuntu0.1_i386.debLinux
An interactive high-level object-oriented language (USN-6891-1) python3.8_3.8.10-0ubuntu1~20.04.10_amd64.debLinux
An interactive high-level object-oriented language (USN-6891-1) python3.8_3.8.10-0ubuntu1~20.04.10_i386.debLinux
An interactive high-level object-oriented language (USN-6891-1) python3.8-minimal_3.8.10-0ubuntu1~20.04.10_amd64.debLinux
An interactive high-level object-oriented language (USN-6891-1) python3.8-minimal_3.8.10-0ubuntu1~20.04.10_i386.debLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234