CVE catalog

CVE-2016-0772

Security update for python3

[CVE catalog]

Severity
Medium · CVSS 6.5CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N
Published
Updated
Source
[NVD] · [CVE record]
EPSS
15.35% · Oct 25, 2026

The smtplib library in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 does not return an error when StartTLS fails, which might allow man-in-the-middle attackers to bypass the TLS protections by leveraging a network position between the client and the registry to block the StartTLS command, aka a "StartTLS stripping attack."

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianpython2.7112.7.12~rc1-1fixed
Ubuntupython2.714.042.7.5-8ubuntu3vulnerable
Ubuntupython2.714.042.7.5-8ubuntu4vulnerable
Ubuntupython2.714.042.7.6-2vulnerable
Ubuntupython2.714.042.7.6-2ubuntu1vulnerable
Ubuntupython2.714.042.7.6-3vulnerable
Ubuntupython2.714.042.7.6-3ubuntu1vulnerable
Ubuntupython2.714.042.7.6-4vulnerable
Ubuntupython2.714.042.7.6-4ubuntu1vulnerable
Ubuntupython2.714.042.7.6-5vulnerable
Ubuntupython2.714.042.7.6-7vulnerable
Ubuntupython2.714.042.7.6-8vulnerable
Ubuntupython2.714.042.7.6-8ubuntu0.2vulnerable
Ubuntupython2.714.042.7.6-8ubuntu0.3fixed
Ubuntupython3.414.043.4~b1-0ubuntu3vulnerable
Ubuntupython3.414.043.4~b1-4ubuntu4vulnerable
Ubuntupython3.414.043.4~b1-4ubuntu6vulnerable
Ubuntupython3.414.043.4~b1-5ubuntu2vulnerable
Ubuntupython3.414.043.4~b2-1vulnerable
Ubuntupython3.414.043.4~b3-1ubuntu1vulnerable
Ubuntupython3.414.043.4~rc1-1build1vulnerable
Ubuntupython3.414.043.4~rc2-1vulnerable
Ubuntupython3.414.043.4~rc3-0ubuntu1vulnerable
Ubuntupython3.414.043.4.0-1vulnerable
Ubuntupython3.414.043.4.0-2ubuntu1vulnerable
Ubuntupython3.414.043.4.0-2ubuntu1.1vulnerable
Ubuntupython3.414.043.4.3-1ubuntu1~14.04.1vulnerable
Ubuntupython3.414.043.4.3-1ubuntu1~14.04.3vulnerable
Ubuntupython3.414.043.4.3-1ubuntu1~14.04.4vulnerable
Ubuntupython3.414.043.4.3-1ubuntu1~14.04.5fixed
Ubuntupython3.514.043.5.2-2ubuntu0~16.04.4~14.04.1fixed
Ubuntupython2.716.042.7.10-4ubuntu1vulnerable
Ubuntupython2.716.042.7.10-4ubuntu2vulnerable
Ubuntupython2.716.042.7.11-2vulnerable
Ubuntupython2.716.042.7.11-3vulnerable
Ubuntupython2.716.042.7.11-4vulnerable
Ubuntupython2.716.042.7.11-6vulnerable
Ubuntupython2.716.042.7.11-7vulnerable
Ubuntupython2.716.042.7.11-7ubuntu1vulnerable
Ubuntupython2.716.042.7.12-1~16.04vulnerable
Ubuntupython2.716.042.7.12-1ubuntu0~16.04.1fixed
Ubuntupython3.516.043.5.0-3vulnerable
Ubuntupython3.516.043.5.0-3ubuntu1vulnerable
Ubuntupython3.516.043.5.1~rc1-2ubuntu1vulnerable
Ubuntupython3.516.043.5.1-1vulnerable
Ubuntupython3.516.043.5.1-2vulnerable
Ubuntupython3.516.043.5.1-3vulnerable
Ubuntupython3.516.043.5.1-5vulnerable
Ubuntupython3.516.043.5.1-6ubuntu1vulnerable
Ubuntupython3.516.043.5.1-6ubuntu2vulnerable
Ubuntupython3.516.043.5.1-9ubuntu1vulnerable
Ubuntupython3.516.043.5.1-10vulnerable
Ubuntupython3.516.043.5.2-2~16.01vulnerable
Ubuntupython3.516.043.5.2-2~16.04vulnerable
Ubuntupython3.516.043.5.2-2ubuntu0~16.04.1fixed
Ubuntupython2.714.042.7.5-8ubuntu3vulnerable
Ubuntupython2.714.042.7.5-8ubuntu4vulnerable
Ubuntupython2.714.042.7.6-2vulnerable
Ubuntupython2.714.042.7.6-2ubuntu1vulnerable
Ubuntupython2.714.042.7.6-3vulnerable
Ubuntupython2.714.042.7.6-3ubuntu1vulnerable
Ubuntupython2.714.042.7.6-4vulnerable
Ubuntupython2.714.042.7.6-4ubuntu1vulnerable
Ubuntupython2.714.042.7.6-5vulnerable
Ubuntupython2.714.042.7.6-7vulnerable
Ubuntupython2.714.042.7.6-8vulnerable
Ubuntupython2.714.042.7.6-8ubuntu0.2vulnerable
Ubuntupython2.714.042.7.6-8ubuntu0.3fixed
Ubuntupython3.414.043.4~b1-0ubuntu3vulnerable
Ubuntupython3.414.043.4~b1-4ubuntu4vulnerable
Ubuntupython3.414.043.4~b1-4ubuntu6vulnerable
Ubuntupython3.414.043.4~b1-5ubuntu2vulnerable
Ubuntupython3.414.043.4~b2-1vulnerable
Ubuntupython3.414.043.4~b3-1ubuntu1vulnerable
Ubuntupython3.414.043.4~rc1-1build1vulnerable
Ubuntupython3.414.043.4~rc2-1vulnerable
Ubuntupython3.414.043.4~rc3-0ubuntu1vulnerable
Ubuntupython3.414.043.4.0-1vulnerable
Ubuntupython3.414.043.4.0-2ubuntu1vulnerable
Ubuntupython3.414.043.4.0-2ubuntu1.1vulnerable
Ubuntupython3.414.043.4.3-1ubuntu1~14.04.1vulnerable
Ubuntupython3.414.043.4.3-1ubuntu1~14.04.3vulnerable
Ubuntupython3.414.043.4.3-1ubuntu1~14.04.4vulnerable
Ubuntupython3.414.043.4.3-1ubuntu1~14.04.5fixed
Ubuntupython2.716.042.7.10-4ubuntu1vulnerable
Ubuntupython2.716.042.7.10-4ubuntu2vulnerable
Ubuntupython2.716.042.7.11-2vulnerable
Ubuntupython2.716.042.7.11-3vulnerable
Ubuntupython2.716.042.7.11-4vulnerable
Ubuntupython2.716.042.7.11-6vulnerable
Ubuntupython2.716.042.7.11-7vulnerable
Ubuntupython2.716.042.7.11-7ubuntu1vulnerable
Ubuntupython2.716.042.7.12-1~16.04vulnerable
Ubuntupython2.716.042.7.12-1ubuntu0~16.04.1fixed
Ubuntupython3.516.043.5.0-3vulnerable
Ubuntupython3.516.043.5.0-3ubuntu1vulnerable
Ubuntupython3.516.043.5.1~rc1-2ubuntu1vulnerable
Ubuntupython3.516.043.5.1-1vulnerable
Ubuntupython3.516.043.5.1-2vulnerable
Ubuntupython3.516.043.5.1-3vulnerable
Ubuntupython3.516.043.5.1-5vulnerable
Ubuntupython3.516.043.5.1-6ubuntu1vulnerable
Ubuntupython3.516.043.5.1-6ubuntu2vulnerable
Ubuntupython3.516.043.5.1-9ubuntu1vulnerable
Ubuntupython3.516.043.5.1-10vulnerable
Ubuntupython3.516.043.5.2-2~16.01vulnerable
Ubuntupython3.516.043.5.2-2~16.04vulnerable
Ubuntupython3.516.043.5.2-2ubuntu0~16.04.1fixed
Debianpython2.772.7.3-6vulnerable
Debianpython2.772.7.3-6+deb7u1vulnerable
Debianpython2.772.7.3-6+deb7u2vulnerable
Debianpython2.772.7.3-6+deb7u3fixed
Debianpython3.273.2.3-7vulnerable
Debianpython3.273.2.3-7+deb7u1fixed
Debianpython3.483.4.2-1vulnerable
Debianpython3.483.4.2-1+deb8u1vulnerable
Debianpython3.483.4.2-1+deb8u2fixed
Susepythonlinux enterprise desktop 12 sp12.7.9-24.1fixed
Susepython-baselinux enterprise desktop 12 sp12.7.9-24.2fixed
Susepython-baselinux enterprise software development kit 12 sp12.7.9-24.2fixed
Susepythonlinux enterprise server 12 sp12.7.9-24.1fixed
Susepython-baselinux enterprise server 12 sp12.7.9-24.2fixed
Susepython-doclinux enterprise server 12 sp12.7.9-24.4fixed
Susepythonlinux enterprise server for sap applications 12 sp12.7.9-24.1fixed
Susepython-baselinux enterprise server for sap applications 12 sp12.7.9-24.2fixed
Susepython-doclinux enterprise server for sap applications 12 sp12.7.9-24.4fixed
Susepython-baselinux enterprise workstation extension 12 sp12.7.9-24.2fixed
Susepythonlinux enterprise server 12-ltss2.7.9-16.7.1fixed
Susepython-baselinux enterprise server 12-ltss2.7.9-16.7.2fixed
Susepython-doclinux enterprise server 12-ltss2.7.9-16.7.2fixed
Opensusepython-doctumbleweed2.7.12-1.3fixed
Susepython3linux enterprise desktop 12 sp13.4.5-17.1fixed
Susepython3-baselinux enterprise desktop 12 sp13.4.5-17.1fixed
Susepython3linux enterprise module for web and scripting 123.4.5-17.1fixed
Susepython3-baselinux enterprise module for web and scripting 123.4.5-17.1fixed
Susepython3-baselinux enterprise software development kit 12 sp13.4.5-17.1fixed
Susepython3linux enterprise server 12 sp13.4.5-17.1fixed
Susepython3-baselinux enterprise server 12 sp13.4.5-17.1fixed
Susepython3linux enterprise server for sap applications 12 sp13.4.5-17.1fixed
Susepython3-baselinux enterprise server for sap applications 12 sp13.4.5-17.1fixed
Susepythonlinux enterprise software development kit 11 sp42.6.9-39.1fixed
Susepython-baselinux enterprise software development kit 11 sp42.6.9-39.1fixed
Susepython-doclinux enterprise software development kit 11 sp42.6-8.39.1fixed
Susepythonlinux enterprise server 11 sp42.6.9-39.1fixed
Susepython-baselinux enterprise server 11 sp42.6.9-39.1fixed
Susepython-doclinux enterprise server 11 sp42.6-8.39.1fixed
Susepythonlinux enterprise server for sap applications 11 sp42.6.9-39.1fixed
Susepython-baselinux enterprise server for sap applications 11 sp42.6.9-39.1fixed
Susepython-doclinux enterprise server for sap applications 11 sp42.6-8.39.1fixed
Susepython3linux enterprise desktop 12 sp23.4.5-19.1fixed
Susepython3-baselinux enterprise desktop 12 sp23.4.5-19.1fixed
Susepython3linux enterprise server for raspberry pi 12 sp23.4.5-19.1fixed
Susepython3-baselinux enterprise server for raspberry pi 12 sp23.4.5-19.1fixed
Susepython3-baselinux enterprise software development kit 12 sp23.4.5-19.1fixed
Susepython3linux enterprise server 12 sp23.4.5-19.1fixed
Susepython3-baselinux enterprise server 12 sp23.4.5-19.1fixed
Susepython3linux enterprise server for sap applications 12 sp23.4.5-19.1fixed
Susepython3-baselinux enterprise server for sap applications 12 sp23.4.5-19.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianpython2.7deb112.7.12~rc1-1Not reportedDEBIAN-CVE-2016-0772Not reported
Ubuntupython2.7deb14.042.7.6-8ubuntu0.3Not reportedUBUNTU-CVE-2016-0772Not reported
Ubuntupython3.4deb14.043.4.3-1ubuntu1~14.04.5Not reportedUBUNTU-CVE-2016-0772Not reported
Ubuntupython3.5deb14.043.5.2-2ubuntu0~16.04.4~14.04.1Not reportedUBUNTU-CVE-2016-0772Not reported
Ubuntupython2.7deb16.042.7.12-1ubuntu0~16.04.1Not reportedUBUNTU-CVE-2016-0772Not reported
Ubuntupython3.5deb16.043.5.2-2ubuntu0~16.04.1Not reportedUBUNTU-CVE-2016-0772Not reported
Ubuntupython2.7deb14.042.7.6-8ubuntu0.3Not reportedUSN-3134-1Not reported
Ubuntupython3.4deb14.043.4.3-1ubuntu1~14.04.5Not reportedUSN-3134-1Not reported
Ubuntupython2.7deb16.042.7.12-1ubuntu0~16.04.1Not reportedUSN-3134-1Not reported
Ubuntupython3.5deb16.043.5.2-2ubuntu0~16.04.1Not reportedUSN-3134-1Not reported
Debianpython2.7deb72.7.3-6+deb7u3Not reportedDLA-522-1Not reported
Debianpython3.2deb73.2.3-7+deb7u1Not reportedDLA-871-1Not reported
Debianpython3.4deb83.4.2-1+deb8u2Not reportedDLA-1663-1Not reported
Susepythonrpmlinux enterprise desktop 12 sp12.7.9-24.1Not reportedSUSE-SU-2016:2106-1Not reported
Susepython-baserpmlinux enterprise desktop 12 sp12.7.9-24.2Not reportedSUSE-SU-2016:2106-1Not reported
Susepython-baserpmlinux enterprise software development kit 12 sp12.7.9-24.2Not reportedSUSE-SU-2016:2106-1Not reported
Susepythonrpmlinux enterprise server 12 sp12.7.9-24.1Not reportedSUSE-SU-2016:2106-1Not reported
Susepython-baserpmlinux enterprise server 12 sp12.7.9-24.2Not reportedSUSE-SU-2016:2106-1Not reported
Susepython-docrpmlinux enterprise server 12 sp12.7.9-24.4Not reportedSUSE-SU-2016:2106-1Not reported
Susepythonrpmlinux enterprise server for sap applications 12 sp12.7.9-24.1Not reportedSUSE-SU-2016:2106-1Not reported
Susepython-baserpmlinux enterprise server for sap applications 12 sp12.7.9-24.2Not reportedSUSE-SU-2016:2106-1Not reported
Susepython-docrpmlinux enterprise server for sap applications 12 sp12.7.9-24.4Not reportedSUSE-SU-2016:2106-1Not reported
Susepython-baserpmlinux enterprise workstation extension 12 sp12.7.9-24.2Not reportedSUSE-SU-2016:2106-1Not reported
Susepythonrpmlinux enterprise server 12-ltss2.7.9-16.7.1Not reportedSUSE-SU-2019:0223-1Not reported
Susepython-baserpmlinux enterprise server 12-ltss2.7.9-16.7.2Not reportedSUSE-SU-2019:0223-1Not reported
Susepython-docrpmlinux enterprise server 12-ltss2.7.9-16.7.2Not reportedSUSE-SU-2019:0223-1Not reported
Opensusepython-docrpmtumbleweed2.7.12-1.3Not reportedOPENSUSE-SU-2024:10193-1Not reported
Susepython3rpmlinux enterprise desktop 12 sp13.4.5-17.1Not reportedSUSE-SU-2016:2653-1Not reported
Susepython3-baserpmlinux enterprise desktop 12 sp13.4.5-17.1Not reportedSUSE-SU-2016:2653-1Not reported
Susepython3rpmlinux enterprise module for web and scripting 123.4.5-17.1Not reportedSUSE-SU-2016:2653-1Not reported
Susepython3-baserpmlinux enterprise module for web and scripting 123.4.5-17.1Not reportedSUSE-SU-2016:2653-1Not reported
Susepython3-baserpmlinux enterprise software development kit 12 sp13.4.5-17.1Not reportedSUSE-SU-2016:2653-1Not reported
Susepython3rpmlinux enterprise server 12 sp13.4.5-17.1Not reportedSUSE-SU-2016:2653-1Not reported
Susepython3-baserpmlinux enterprise server 12 sp13.4.5-17.1Not reportedSUSE-SU-2016:2653-1Not reported
Susepython3rpmlinux enterprise server for sap applications 12 sp13.4.5-17.1Not reportedSUSE-SU-2016:2653-1Not reported
Susepython3-baserpmlinux enterprise server for sap applications 12 sp13.4.5-17.1Not reportedSUSE-SU-2016:2653-1Not reported
Susepythonrpmlinux enterprise software development kit 11 sp42.6.9-39.1Not reportedSUSE-SU-2016:2270-1Not reported
Susepython-baserpmlinux enterprise software development kit 11 sp42.6.9-39.1Not reportedSUSE-SU-2016:2270-1Not reported
Susepython-docrpmlinux enterprise software development kit 11 sp42.6-8.39.1Not reportedSUSE-SU-2016:2270-1Not reported
Susepythonrpmlinux enterprise server 11 sp42.6.9-39.1Not reportedSUSE-SU-2016:2270-1Not reported
Susepython-baserpmlinux enterprise server 11 sp42.6.9-39.1Not reportedSUSE-SU-2016:2270-1Not reported
Susepython-docrpmlinux enterprise server 11 sp42.6-8.39.1Not reportedSUSE-SU-2016:2270-1Not reported
Susepythonrpmlinux enterprise server for sap applications 11 sp42.6.9-39.1Not reportedSUSE-SU-2016:2270-1Not reported
Susepython-baserpmlinux enterprise server for sap applications 11 sp42.6.9-39.1Not reportedSUSE-SU-2016:2270-1Not reported
Susepython-docrpmlinux enterprise server for sap applications 11 sp42.6-8.39.1Not reportedSUSE-SU-2016:2270-1Not reported
Susepython3rpmlinux enterprise desktop 12 sp23.4.5-19.1Not reportedSUSE-SU-2016:2859-1Not reported
Susepython3-baserpmlinux enterprise desktop 12 sp23.4.5-19.1Not reportedSUSE-SU-2016:2859-1Not reported
Susepython3rpmlinux enterprise server for raspberry pi 12 sp23.4.5-19.1Not reportedSUSE-SU-2016:2859-1Not reported
Susepython3-baserpmlinux enterprise server for raspberry pi 12 sp23.4.5-19.1Not reportedSUSE-SU-2016:2859-1Not reported
Susepython3-baserpmlinux enterprise software development kit 12 sp23.4.5-19.1Not reportedSUSE-SU-2016:2859-1Not reported
Susepython3rpmlinux enterprise server 12 sp23.4.5-19.1Not reportedSUSE-SU-2016:2859-1Not reported
Susepython3-baserpmlinux enterprise server 12 sp23.4.5-19.1Not reportedSUSE-SU-2016:2859-1Not reported
Susepython3rpmlinux enterprise server for sap applications 12 sp23.4.5-19.1Not reportedSUSE-SU-2016:2859-1Not reported
Susepython3-baserpmlinux enterprise server for sap applications 12 sp23.4.5-19.1Not reportedSUSE-SU-2016:2859-1Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References