CVE-2019-20907 — Infinite Loop in Python

CWE-835 — Infinite LoopCWE-20 — Improper Input Validation22 documents9 sources
Severity
7.5HIGHNVD
EPSS
0.3%
top 44.59%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
7
PythonCanonical Ubuntu LinuxDebian Linux+4 more
Timeline
PublishedJul 13
Latest updateJul 11

Description

In Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to an infinite loop when opened by tarfile.open, because _proc_pax lacks header validation.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages4 packages

▶NVDpython/python3.5.0 — 3.5.10+3
▶NVDopensuse/leap15.1, 15.2+1

Also affects: Debian Linux 9.0, Fedora 31, 32, Ubuntu Linux 12.04, 14.04, 16.04, 18.04, 20.04

Patches

Patch: github.com ↗Patch: www.oracle.com ↗Patch: github.com ↗

🔴Vulnerability Details

3
GHSA
GHSA-xc97-8p9q-cf27: In Lib/tarfile↗2022-05-24
▶
CVEList
CVE-2019-20907: In Lib/tarfile↗2020-07-13
▶
OSV
CVE-2019-20907: In Lib/tarfile↗2020-07-13
▶

📋Vendor Advisories

6
Ubuntu
Python vulnerabilities↗2024-07-11
▶
Ubuntu
Python vulnerabilities↗2021-03-12
▶
Ubuntu
Python vulnerabilities↗2020-07-22
▶
Microsoft
In Lib/tarfile.py in Python through 3.8.3 an attacker is able to craft a TAR archive leading to an infinite loop when opened by tarfile.open because _proc_pax lacks header validation.↗2020-07-14
▶
Red Hat
python: infinite loop in the tarfile module via crafted TAR archive↗2019-12-10
▶

💬Community

12
Bugzilla
CVE-2019-20907 python3: python: infinite loop in the tarfile module via crafted TAR archive [fedora-all]↗2020-07-13
▶
Bugzilla
CVE-2019-20907 python38: python: infinite loop in the tarfile module via crafted TAR archive [fedora-all]↗2020-07-13
▶
Bugzilla
CVE-2019-20907 python39: python: infinite loop in the tarfile module via crafted TAR archive [fedora-all]↗2020-07-13
▶
Bugzilla
CVE-2019-20907 python34: python: infinite loop in the tarfile module via crafted TAR archive [epel-all]↗2020-07-13
▶
Bugzilla
CVE-2019-20907 python34: python: infinite loop in the tarfile module via a craft TAR archive [fedora-all]↗2020-07-13
▶
CVE-2019-20907 — Infinite Loop in Python | cvebase