Oval Definition:
oval:com.ubuntu.trusty:def:20181060000
Revision Date
:
2018-06-18
Version
:
1
Title
:
CVE-2018-1060 on Ubuntu 14.04 LTS (trusty) - low.
Description
:
python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in pop3lib's apop() method. An attacker could use this flaw to cause denial of service.
Family
:
unix
Class
:
vulnerability
Status
:
Reference(s)
:
CVE-2018-1060
Platform(s)
:
Ubuntu 14.04 LTS
Product(s)
:
Definition Synopsis
Ubuntu 14.04 LTS (trusty) is installed.
AND
Package Information
The 'python2.7' package in trusty was vulnerable but has been fixed (note: '2.7.6-8ubuntu0.5').
OR
The 'python3.4' package in trusty was vulnerable but has been fixed (note: '3.4.3-1ubuntu1~14.04.7').
OR
The 'python3.5' package in trusty is affected and needs fixing.
BACK