IM
IronMonkey Threat Research

CVE-2019-9948 CRITICAL

Published: 2019-03-23 | Last Modified: 2026-10-07 | Status: Modified

Description

urllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for remote attackers to bypass protection mechanisms that blacklist file: URIs, as demonstrated by triggering a urllib.urlopen('local_file:///etc/passwd') call.

Additional Descriptions (1)

urllib en Python, en versiones 2.x hasta la 2.7.16, soporta el esquema local_file:, lo que facilita que los atacantes remotos omitan los mecanismos de protección que ponen en lista negra los URI file:, tal y como queda demostrado con una llamada urllib.urlopen('local_file:///etc/passwd').

CVSS Metrics

Base Score: 9.1 (CRITICAL)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Attack VectorNETWORK
Attack ComplexityLOW
Privileges RequiredNONE
User InteractionNONE
ScopeUNCHANGED
Confidentiality ImpactHIGH
Integrity ImpactHIGH
Availability ImpactNONE

Source: [email protected]

Type: Primary

Exploitability Score: 3.9

Impact Score: 5.2

Base Score: 6.4 (MEDIUM)

AV:N/AC:L/Au:N/C:P/I:P/A:N

Access VectorNETWORK
Access ComplexityLOW
AuthenticationNONE
Confidentiality ImpactPARTIAL
Integrity ImpactPARTIAL
Availability ImpactNONE

Source: [email protected]

Type: Primary

Exploitability Score: 10.0

Impact Score: 4.9

Weaknesses

Source Type Description
[email protected] Primary
en CWE-22
134c704f-9b21-4f2e-91b3-4a467353bcc0 Secondary
en CWE-22

Affected Products

Vendor Product Version Update Type
python python * <built-in method update of dict object at 0x7fd36b85fa00> Application
python python * <built-in method update of dict object at 0x7fd3081a4b80> Application
python python * <built-in method update of dict object at 0x7fd3694e8f40> Application
python python * <built-in method update of dict object at 0x7fd368697740> Application
opensuse leap 15.0 <built-in method update of dict object at 0x7fd36b85f840> Operating System
opensuse leap 42.3 <built-in method update of dict object at 0x7fd368d9b780> Operating System
debian debian_linux 8.0 <built-in method update of dict object at 0x7fd36942ecc0> Operating System
debian debian_linux 9.0 <built-in method update of dict object at 0x7fd3081a45c0> Operating System
fedoraproject fedora 29 <built-in method update of dict object at 0x7fd384a14f80> Operating System
fedoraproject fedora 30 <built-in method update of dict object at 0x7fd36b85f8c0> Operating System
canonical ubuntu_linux 12.04 <built-in method update of dict object at 0x7fd368697080> Operating System
canonical ubuntu_linux 14.04 <built-in method update of dict object at 0x7fd3081a5cc0> Operating System
canonical ubuntu_linux 16.04 <built-in method update of dict object at 0x7fd368694700> Operating System
canonical ubuntu_linux 18.04 <built-in method update of dict object at 0x7fd36b8d6e00> Operating System
canonical ubuntu_linux 19.04 <built-in method update of dict object at 0x7fd3081a7a00> Operating System
redhat enterprise_linux_desktop 7.0 <built-in method update of dict object at 0x7fd3106f3600> Operating System
redhat enterprise_linux_desktop 8.0 <built-in method update of dict object at 0x7fd384605500> Operating System
redhat enterprise_linux_eus 8.1 <built-in method update of dict object at 0x7fd36942db80> Operating System
redhat enterprise_linux_eus 8.2 <built-in method update of dict object at 0x7fd38462fd80> Operating System
redhat enterprise_linux_eus 8.4 <built-in method update of dict object at 0x7fd36b913e00> Operating System
redhat enterprise_linux_eus 8.6 <built-in method update of dict object at 0x7fd370362bc0> Operating System
redhat enterprise_linux_server 7.0 <built-in method update of dict object at 0x7fd368695c00> Operating System
redhat enterprise_linux_server 8.0 <built-in method update of dict object at 0x7fd384691780> Operating System
redhat enterprise_linux_server_eus 8.4 <built-in method update of dict object at 0x7fd36942d5c0> Operating System
redhat enterprise_linux_tus 8.2 <built-in method update of dict object at 0x7fd36942cf40> Operating System
redhat enterprise_linux_tus 8.4 <built-in method update of dict object at 0x7fd3081a5180> Operating System
redhat enterprise_linux_tus 8.6 <built-in method update of dict object at 0x7fd3081a7ac0> Operating System
redhat enterprise_linux_workstation 7.0 <built-in method update of dict object at 0x7fd3081a6ec0> Operating System
redhat enterprise_linux_workstation 8.0 <built-in method update of dict object at 0x7fd3694d9280> Operating System

Affected Configurations

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:python:python:*:*:*:*:*:*:*:*
Yes cpe:2.3:a:python:python:*:*:*:*:*:*:*:*
Yes cpe:2.3:a:python:python:*:*:*:*:*:*:*:*
Yes cpe:2.3:a:python:python:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*
Yes cpe:2.3:o:opensuse:leap:42.3:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
Yes cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*
Yes cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*
Yes cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*
Yes cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*
Yes cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
Yes cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*
Yes cpe:2.3:o:redhat:enterprise_linux_desktop:8.0:*:*:*:*:*:*:*
Yes cpe:2.3:o:redhat:enterprise_linux_eus:8.1:*:*:*:*:*:*:*
Yes cpe:2.3:o:redhat:enterprise_linux_eus:8.2:*:*:*:*:*:*:*
Yes cpe:2.3:o:redhat:enterprise_linux_eus:8.4:*:*:*:*:*:*:*
Yes cpe:2.3:o:redhat:enterprise_linux_eus:8.6:*:*:*:*:*:*:*
Yes cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
Yes cpe:2.3:o:redhat:enterprise_linux_server:8.0:*:*:*:*:*:*:*
Yes cpe:2.3:o:redhat:enterprise_linux_server_eus:8.4:*:*:*:*:*:*:*
Yes cpe:2.3:o:redhat:enterprise_linux_tus:8.2:*:*:*:*:*:*:*
Yes cpe:2.3:o:redhat:enterprise_linux_tus:8.4:*:*:*:*:*:*:*
Yes cpe:2.3:o:redhat:enterprise_linux_tus:8.6:*:*:*:*:*:*:*
Yes cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*
Yes cpe:2.3:o:redhat:enterprise_linux_workstation:8.0:*:*:*:*:*:*:*

References