CVE-2018-1060
Public on 2018-04-26
Modified on 2019-07-01
Description
A flaw was found in the way catastrophic backtracking was implemented in python's pop3lib's apop() method. An attacker could use this flaw to cause denial of service.
Severity
Low
CVSS v3 Base Score
See breakdown
Affected Packages
| Platform | Package | Release Date | Advisory | Status |
|---|---|---|---|---|
| HAQM Linux 2 - Core | python | 2019-06-25 | ALAS2-2019-1230 | Fixed |
| HAQM Linux 1 | python27 | 2018-04-26 | ALAS-2018-1003 | Fixed |
| HAQM Linux 1 | python27 | 2018-12-06 | ALAS-2018-1108 | Fixed |
| HAQM Linux 1 | python34 | 2018-04-26 | ALAS-2018-1003 | Fixed |
| HAQM Linux 1 | python35 | 2018-04-26 | ALAS-2018-1003 | Fixed |
| HAQM Linux 1 | python36 | 2018-04-26 | ALAS-2018-1003 | Fixed |
CVSS Scores
| Score Type | Score | Vector | |
|---|---|---|---|
| HAQM Linux | CVSSv3 | 4.3 | CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L |
| NVD | CVSSv2 | 5.0 | AV:N/AC:L/Au:N/C:N/I:N/A:P |
| NVD | CVSSv3 | 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |