CVE catalog

CVE-2016-1000110

UBUNTU-CVE-2016-1000110

[CVE catalog]

Severity
Medium · CVSS 6.1CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Published
Updated
Source
[NVD] · [CVE record]
EPSS
4.53% · Oct 25, 2026

The CGIHandler class in Python before 2.7.12 does not protect against the HTTP_PROXY variable name clash in a CGI script, which could allow a remote attacker to redirect HTTP requests.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianpython2.7112.7.12-2fixed
Ubuntupython2.714.042.7.5-8ubuntu3vulnerable
Ubuntupython2.714.042.7.5-8ubuntu4vulnerable
Ubuntupython2.714.042.7.6-2vulnerable
Ubuntupython2.714.042.7.6-2ubuntu1vulnerable
Ubuntupython2.714.042.7.6-3vulnerable
Ubuntupython2.714.042.7.6-3ubuntu1vulnerable
Ubuntupython2.714.042.7.6-4vulnerable
Ubuntupython2.714.042.7.6-4ubuntu1vulnerable
Ubuntupython2.714.042.7.6-5vulnerable
Ubuntupython2.714.042.7.6-7vulnerable
Ubuntupython2.714.042.7.6-8vulnerable
Ubuntupython2.714.042.7.6-8ubuntu0.2vulnerable
Ubuntupython2.714.042.7.6-8ubuntu0.3fixed
Ubuntupython3.414.043.4~b1-0ubuntu3vulnerable
Ubuntupython3.414.043.4~b1-4ubuntu4vulnerable
Ubuntupython3.414.043.4~b1-4ubuntu6vulnerable
Ubuntupython3.414.043.4~b1-5ubuntu2vulnerable
Ubuntupython3.414.043.4~b2-1vulnerable
Ubuntupython3.414.043.4~b3-1ubuntu1vulnerable
Ubuntupython3.414.043.4~rc1-1build1vulnerable
Ubuntupython3.414.043.4~rc2-1vulnerable
Ubuntupython3.414.043.4~rc3-0ubuntu1vulnerable
Ubuntupython3.414.043.4.0-1vulnerable
Ubuntupython3.414.043.4.0-2ubuntu1vulnerable
Ubuntupython3.414.043.4.0-2ubuntu1.1vulnerable
Ubuntupython3.414.043.4.3-1ubuntu1~14.04.1vulnerable
Ubuntupython3.414.043.4.3-1ubuntu1~14.04.3vulnerable
Ubuntupython3.414.043.4.3-1ubuntu1~14.04.4vulnerable
Ubuntupython3.414.043.4.3-1ubuntu1~14.04.5fixed
Ubuntupython3.514.043.5.2-2ubuntu0~16.04.4~14.04.1fixed
Ubuntupython2.716.042.7.10-4ubuntu1vulnerable
Ubuntupython2.716.042.7.10-4ubuntu2vulnerable
Ubuntupython2.716.042.7.11-2vulnerable
Ubuntupython2.716.042.7.11-3vulnerable
Ubuntupython2.716.042.7.11-4vulnerable
Ubuntupython2.716.042.7.11-6vulnerable
Ubuntupython2.716.042.7.11-7vulnerable
Ubuntupython2.716.042.7.11-7ubuntu1vulnerable
Ubuntupython2.716.042.7.12-1~16.04vulnerable
Ubuntupython2.716.042.7.12-1ubuntu0~16.04.1fixed
Ubuntupython3.516.043.5.0-3vulnerable
Ubuntupython3.516.043.5.0-3ubuntu1vulnerable
Ubuntupython3.516.043.5.1~rc1-2ubuntu1vulnerable
Ubuntupython3.516.043.5.1-1vulnerable
Ubuntupython3.516.043.5.1-2vulnerable
Ubuntupython3.516.043.5.1-3vulnerable
Ubuntupython3.516.043.5.1-5vulnerable
Ubuntupython3.516.043.5.1-6ubuntu1vulnerable
Ubuntupython3.516.043.5.1-6ubuntu2vulnerable
Ubuntupython3.516.043.5.1-9ubuntu1vulnerable
Ubuntupython3.516.043.5.1-10vulnerable
Ubuntupython3.516.043.5.2-2~16.01vulnerable
Ubuntupython3.516.043.5.2-2~16.04vulnerable
Ubuntupython3.516.043.5.2-2ubuntu0~16.04.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianpython2.7deb112.7.12-2Not reportedDEBIAN-CVE-2016-1000110Not reported
Ubuntupython2.7deb14.042.7.6-8ubuntu0.3Not reportedUBUNTU-CVE-2016-1000110Not reported
Ubuntupython3.4deb14.043.4.3-1ubuntu1~14.04.5Not reportedUBUNTU-CVE-2016-1000110Not reported
Ubuntupython3.5deb14.043.5.2-2ubuntu0~16.04.4~14.04.1Not reportedUBUNTU-CVE-2016-1000110Not reported
Ubuntupython2.7deb16.042.7.12-1ubuntu0~16.04.1Not reportedUBUNTU-CVE-2016-1000110Not reported
Ubuntupython3.5deb16.043.5.2-2ubuntu0~16.04.1Not reportedUBUNTU-CVE-2016-1000110Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]