IM
IronMonkey Threat Research

CVE-2020-26116 HIGH

Published: 2020-09-27 | Last Modified: 2026-10-08 | Status: Modified

Description

http.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x before 3.8.5 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by inserting CR and LF control characters in the first argument of HTTPConnection.request.

Additional Descriptions (1)

http.client en Python 3.x antes de la versión 3.5.10, 3.6.x antes de la versión 3.6.12, 3.7.x antes de la versión 3.7.9, y 3.8.x antes de la versión 3.8.5 permite la inyección de CRLF si el atacante controla el método de petición HTTP, como se demuestra insertando caracteres de control CR y LF en el primer argumento de HTTPConnection.request

CVSS Metrics

Base Score: 7.2 (HIGH)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N

Attack VectorNETWORK
Attack ComplexityLOW
Privileges RequiredNONE
User InteractionNONE
ScopeCHANGED
Confidentiality ImpactLOW
Integrity ImpactLOW
Availability ImpactNONE

Source: [email protected]

Type: Primary

Exploitability Score: 3.9

Impact Score: 2.7

Base Score: 6.4 (MEDIUM)

AV:N/AC:L/Au:N/C:P/I:P/A:N

Access VectorNETWORK
Access ComplexityLOW
AuthenticationNONE
Confidentiality ImpactPARTIAL
Integrity ImpactPARTIAL
Availability ImpactNONE

Source: [email protected]

Type: Primary

Exploitability Score: 10.0

Impact Score: 4.9

Weaknesses

Source Type Description
[email protected] Primary
en CWE-74

Affected Products

Vendor Product Version Update Type
python python * <built-in method update of dict object at 0x7fd38477ca40> Application
python python * <built-in method update of dict object at 0x7fd340be56c0> Application
python python * <built-in method update of dict object at 0x7fd369eeae00> Application
python python * <built-in method update of dict object at 0x7fd36a7ee480> Application
fedoraproject fedora 31 <built-in method update of dict object at 0x7fd38477dc40> Operating System
fedoraproject fedora 32 <built-in method update of dict object at 0x7fd38477dd40> Operating System
fedoraproject fedora 33 <built-in method update of dict object at 0x7fd31b20c4c0> Operating System
canonical ubuntu_linux 12.04 <built-in method update of dict object at 0x7fd36a7ef580> Operating System
canonical ubuntu_linux 14.04 <built-in method update of dict object at 0x7fd38477c340> Operating System
canonical ubuntu_linux 16.04 <built-in method update of dict object at 0x7fd38477d740> Operating System
canonical ubuntu_linux 18.04 <built-in method update of dict object at 0x7fd369ad7800> Operating System
netapp solidfire - <built-in method update of dict object at 0x7fd369ad5dc0> Application
netapp hci_storage_node - <built-in method update of dict object at 0x7fd36a7ee640> Hardware
debian debian_linux 9.0 <built-in method update of dict object at 0x7fd369ad7ac0> Operating System
oracle zfs_storage_appliance_kit 8.8 <built-in method update of dict object at 0x7fd369eeba40> Application
opensuse leap 15.1 <built-in method update of dict object at 0x7fd3697d7f40> Operating System

Affected Configurations

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:python:python:*:*:*:*:*:*:*:*
Yes cpe:2.3:a:python:python:*:*:*:*:*:*:*:*
Yes cpe:2.3:a:python:python:*:*:*:*:*:*:*:*
Yes cpe:2.3:a:python:python:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*
Yes cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*
Yes cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*
Yes cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*
Yes cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*
Yes cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:netapp:solidfire:-:*:*:*:*:*:*:*
No cpe:2.3:h:netapp:hci_compute_node:-:*:*:*:*:*:*:*
Yes cpe:2.3:h:netapp:hci_storage_node:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:oracle:zfs_storage_appliance_kit:8.8:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*

References