CVE catalog

CVE-2019-9674

Security update for python36

[CVE catalog]

Severity
Medium · CVSS 6.5CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Published
Updated
Source
[NVD] · [CVE record]
EPSS
5.64% · Oct 25, 2026

Lib/zipfile.py in Python through 3.7.2 allows remote attackers to cause a denial of service (resource consumption) via a ZIP bomb.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianpython2.7112.7.18-10vulnerable
Debianpython2.7112.7.18-11vulnerable
Debianpython2.7112.7.18-12vulnerable
Debianpython2.7112.7.18-13vulnerable
Debianpython2.7112.7.18-13.1vulnerable
Debianpython2.7112.7.18-13.1~exp1vulnerable
Debianpython2.7112.7.18-13.2vulnerable
Debianpython2.7112.7.18-8vulnerable
Debianpython2.7112.7.18-8+deb11u1vulnerable
Debianpython2.7112.7.18-9vulnerable
Ubuntupython2.7pro2.7.18-8build1vulnerable
Ubuntupython2.7pro2.7.18-13vulnerable
Ubuntupython2.7pro2.7.18-13ubuntu1vulnerable
Ubuntupython2.7pro2.7.18-13ubuntu1.1vulnerable
Ubuntupython2.7pro2.7.18-13ubuntu1.1+esm2vulnerable
Ubuntupython2.7pro2.7.18-13ubuntu1.2vulnerable
Ubuntupython2.7pro2.7.18-13ubuntu1.2+esm1vulnerable
Ubuntupython2.7pro2.7.18-13ubuntu1.2+esm2vulnerable
Ubuntupython2.7pro2.7.18-13ubuntu1.2+esm3vulnerable
Ubuntupython2.7pro2.7.18-13ubuntu1.3vulnerable
Ubuntupython2.7pro2.7.18-13ubuntu1.3+esm1vulnerable
Ubuntupython2.7pro2.7.18-13ubuntu1.4vulnerable
Ubuntupython2.7pro2.7.18-13ubuntu1.4+esm1vulnerable
Ubuntupython2.7pro2.7.18-13ubuntu1.5vulnerable
Ubuntupython2.7pro2.7.18-13ubuntu1.5+esm2vulnerable
Ubuntupython2.7pro2.7.18-13ubuntu1.5+esm3fixed
Ubuntupython2.7pro2.7.18-8build1vulnerable
Ubuntupython2.7pro2.7.18-13vulnerable
Ubuntupython2.7pro2.7.18-13ubuntu1vulnerable
Ubuntupython2.7pro2.7.18-13ubuntu1.1vulnerable
Ubuntupython2.7pro2.7.18-13ubuntu1.1+esm2vulnerable
Ubuntupython2.7pro2.7.18-13ubuntu1.2vulnerable
Ubuntupython2.7pro2.7.18-13ubuntu1.2+esm1vulnerable
Ubuntupython2.7pro2.7.18-13ubuntu1.2+esm2vulnerable
Ubuntupython2.7pro2.7.18-13ubuntu1.2+esm3vulnerable
Ubuntupython2.7pro2.7.18-13ubuntu1.3vulnerable
Ubuntupython2.7pro2.7.18-13ubuntu1.3+esm1vulnerable
Ubuntupython2.7pro2.7.18-13ubuntu1.4vulnerable
Ubuntupython2.7pro2.7.18-13ubuntu1.4+esm1vulnerable
Ubuntupython2.7pro2.7.18-13ubuntu1.5vulnerable
Ubuntupython2.7pro2.7.18-13ubuntu1.5+esm2vulnerable
Ubuntupython2.7pro2.7.18-13ubuntu1.5+esm3fixed
Ubuntupython3.4pro3.4~b1-0ubuntu3vulnerable
Ubuntupython3.4pro3.4~b1-4ubuntu4vulnerable
Ubuntupython3.4pro3.4~b1-4ubuntu6vulnerable
Ubuntupython3.4pro3.4~b1-5ubuntu2vulnerable
Ubuntupython3.4pro3.4~b2-1vulnerable
Ubuntupython3.4pro3.4~b3-1ubuntu1vulnerable
Ubuntupython3.4pro3.4~rc1-1build1vulnerable
Ubuntupython3.4pro3.4~rc2-1vulnerable
Ubuntupython3.4pro3.4~rc3-0ubuntu1vulnerable
Ubuntupython3.4pro3.4.0-1vulnerable
Ubuntupython3.4pro3.4.0-2ubuntu1vulnerable
Ubuntupython3.4pro3.4.0-2ubuntu1.1vulnerable
Ubuntupython3.4pro3.4.3-1ubuntu1~14.04.1vulnerable
Ubuntupython3.4pro3.4.3-1ubuntu1~14.04.3vulnerable
Ubuntupython3.4pro3.4.3-1ubuntu1~14.04.4vulnerable
Ubuntupython3.4pro3.4.3-1ubuntu1~14.04.5vulnerable
Ubuntupython3.4pro3.4.3-1ubuntu1~14.04.6vulnerable
Ubuntupython3.4pro3.4.3-1ubuntu1~14.04.7vulnerable
Ubuntupython3.4pro3.4.3-1ubuntu1~14.04.7+esm2vulnerable
Ubuntupython3.4pro3.4.3-1ubuntu1~14.04.7+esm4vulnerable
Ubuntupython3.4pro3.4.3-1ubuntu1~14.04.7+esm6vulnerable
Ubuntupython3.4pro3.4.3-1ubuntu1~14.04.7+esm7fixed
Ubuntupython3.5pro3.5.2-2ubuntu0~16.04.4~14.04.1vulnerable
Ubuntupython3.5pro3.5.2-2ubuntu0~16.04.4~14.04.1+esm1fixed
Ubuntupython2.716.042.7.10-4ubuntu1vulnerable
Ubuntupython2.716.042.7.10-4ubuntu2vulnerable
Ubuntupython2.716.042.7.11-2vulnerable
Ubuntupython2.716.042.7.11-3vulnerable
Ubuntupython2.716.042.7.11-4vulnerable
Ubuntupython2.716.042.7.11-6vulnerable
Ubuntupython2.716.042.7.11-7vulnerable
Ubuntupython2.716.042.7.11-7ubuntu1vulnerable
Ubuntupython2.716.042.7.12-1~16.04vulnerable
Ubuntupython2.716.042.7.12-1ubuntu0~16.04.1vulnerable
Ubuntupython2.716.042.7.12-1ubuntu0~16.04.2vulnerable
Ubuntupython2.716.042.7.12-1ubuntu0~16.04.3vulnerable
Ubuntupython2.716.042.7.12-1ubuntu0~16.04.4vulnerable
Ubuntupython2.716.042.7.12-1ubuntu0~16.04.8vulnerable
Ubuntupython2.716.042.7.12-1ubuntu0~16.04.9vulnerable
Ubuntupython2.716.042.7.12-1ubuntu0~16.04.11vulnerable
Ubuntupython2.716.042.7.12-1ubuntu0~16.04.12fixed
Ubuntupython3.516.043.5.0-3vulnerable
Ubuntupython3.516.043.5.0-3ubuntu1vulnerable
Ubuntupython3.516.043.5.1~rc1-2ubuntu1vulnerable
Ubuntupython3.516.043.5.1-1vulnerable
Ubuntupython3.516.043.5.1-2vulnerable
Ubuntupython3.516.043.5.1-3vulnerable
Ubuntupython3.516.043.5.1-5vulnerable
Ubuntupython3.516.043.5.1-6ubuntu1vulnerable
Ubuntupython3.516.043.5.1-6ubuntu2vulnerable
Ubuntupython3.516.043.5.1-9ubuntu1vulnerable
Ubuntupython3.516.043.5.1-10vulnerable
Ubuntupython3.516.043.5.2-2~16.01vulnerable
Ubuntupython3.516.043.5.2-2~16.04vulnerable
Ubuntupython3.516.043.5.2-2ubuntu0~16.04.1vulnerable
Ubuntupython3.516.043.5.2-2ubuntu0~16.04.2vulnerable
Ubuntupython3.516.043.5.2-2ubuntu0~16.04.3vulnerable
Ubuntupython3.516.043.5.2-2ubuntu0~16.04.4vulnerable
Ubuntupython3.516.043.5.2-2ubuntu0~16.04.5vulnerable
Ubuntupython3.516.043.5.2-2ubuntu0~16.04.8vulnerable
Ubuntupython3.516.043.5.2-2ubuntu0~16.04.9vulnerable
Ubuntupython3.516.043.5.2-2ubuntu0~16.04.10vulnerable
Ubuntupython3.516.043.5.2-2ubuntu0~16.04.11fixed
Ubuntupython2.718.042.7.14-2ubuntu2vulnerable
Ubuntupython2.718.042.7.14-4vulnerable
Ubuntupython2.718.042.7.14-6vulnerable
Ubuntupython2.718.042.7.14-7vulnerable
Ubuntupython2.718.042.7.14-8vulnerable
Ubuntupython2.718.042.7.15~rc1-1vulnerable
Ubuntupython2.718.042.7.15~rc1-1ubuntu0.1vulnerable
Ubuntupython2.718.042.7.15-4ubuntu4~18.04vulnerable
Ubuntupython2.718.042.7.15-4ubuntu4~18.04.1vulnerable
Ubuntupython2.718.042.7.15-4ubuntu4~18.04.2vulnerable
Ubuntupython2.718.042.7.17-1~18.04vulnerable
Ubuntupython2.718.042.7.17-1~18.04ubuntu1vulnerable
Ubuntupython2.718.042.7.17-1~18.04ubuntu1.1fixed
Ubuntupython3.618.043.6.3-1ubuntu1vulnerable
Ubuntupython3.618.043.6.4~rc1-1vulnerable
Ubuntupython3.618.043.6.4~rc1-2vulnerable
Ubuntupython3.618.043.6.4-1vulnerable
Ubuntupython3.618.043.6.4-2vulnerable
Ubuntupython3.618.043.6.4-3build1vulnerable
Ubuntupython3.618.043.6.4-4vulnerable
Ubuntupython3.618.043.6.5~rc1-1vulnerable
Ubuntupython3.618.043.6.5-3vulnerable
Ubuntupython3.618.043.6.6-1~18.04vulnerable
Ubuntupython3.618.043.6.7-1~18.04vulnerable
Ubuntupython3.618.043.6.8-1~18.04.1vulnerable
Ubuntupython3.618.043.6.8-1~18.04.2vulnerable
Ubuntupython3.618.043.6.8-1~18.04.3vulnerable
Ubuntupython3.618.043.6.9-1~18.04vulnerable
Ubuntupython3.618.043.6.9-1~18.04ubuntu1vulnerable
Ubuntupython3.618.043.6.9-1~18.04ubuntu1.1fixed
Ubuntupython3.7pro3.7.0~a2-1vulnerable
Ubuntupython3.7pro3.7.0~a3-1vulnerable
Ubuntupython3.7pro3.7.0~a3-2vulnerable
Ubuntupython3.7pro3.7.0~a3-3vulnerable
Ubuntupython3.7pro3.7.0~a4-1vulnerable
Ubuntupython3.7pro3.7.0~b1-1vulnerable
Ubuntupython3.7pro3.7.0~b1-1build1vulnerable
Ubuntupython3.7pro3.7.0~b2-1vulnerable
Ubuntupython3.7pro3.7.0~b3-1vulnerable
Ubuntupython3.7pro3.7.0-1~18.04vulnerable
Ubuntupython3.7pro3.7.1-1~18.04vulnerable
Ubuntupython3.7pro3.7.3-2~18.04.1vulnerable
Ubuntupython3.7pro3.7.5-2~18.04vulnerable
Ubuntupython3.7pro3.7.5-2~18.04.4vulnerable
Ubuntupython3.7pro3.7.5-2ubuntu1~18.04.2vulnerable
Ubuntupython3.7pro3.7.5-2ubuntu1~18.04.2+esm1vulnerable
Ubuntupython3.7pro3.7.5-2ubuntu1~18.04.2+esm2vulnerable
Ubuntupython3.7pro3.7.5-2ubuntu1~18.04.2+esm3fixed
Ubuntupython2.720.042.7.17~rc1-1vulnerable
Ubuntupython2.720.042.7.17-1vulnerable
Ubuntupython2.720.042.7.17-1ubuntu5vulnerable
Ubuntupython2.720.042.7.17-1ubuntu6vulnerable
Ubuntupython2.720.042.7.18~rc1-2vulnerable
Ubuntupython2.720.042.7.18-1~20.04vulnerable
Ubuntupython2.720.042.7.18-1~20.04.1fixed
Susepythonlinux enterprise module for basesystem 15 sp12.7.17-7.35.1fixed
Susepython-baselinux enterprise module for basesystem 15 sp12.7.17-7.35.1fixed
Susepythonlinux enterprise module for desktop applications 15 sp12.7.17-7.35.1fixed
Susepythonlinux enterprise module for python 2 15 sp12.7.17-7.35.1fixed
Susepython-baselinux enterprise module for python 2 15 sp12.7.17-7.35.1fixed
Susepython3linux enterprise module for basesystem 15 sp13.6.10-3.47.2fixed
Susepython3-baselinux enterprise module for basesystem 15 sp13.6.10-3.47.2fixed
Susepython3-baselinux enterprise module for development tools 15 sp13.6.10-3.47.2fixed
Opensusepython3leap 15.13.6.10-lp151.6.11.1fixed
Opensusepython3-baseleap 15.13.6.10-lp151.6.11.1fixed
Susepython36linux enterprise server 12 sp53.6.10-4.6.1fixed
Susepython36-baselinux enterprise server 12 sp53.6.10-4.6.1fixed
Susepython36linux enterprise server for sap applications 12 sp53.6.10-4.6.1fixed
Susepython36-baselinux enterprise server for sap applications 12 sp53.6.10-4.6.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Ubuntupython2.7debpro2.7.18-13ubuntu1.5+esm3Not reportedUSN-7212-1Not reported
Ubuntupython2.7debpro2.7.18-13ubuntu1.5+esm3Not reportedUBUNTU-CVE-2019-9674Not reported
Ubuntupython3.4debpro3.4.3-1ubuntu1~14.04.7+esm7Not reportedUBUNTU-CVE-2019-9674Not reported
Ubuntupython3.5debpro3.5.2-2ubuntu0~16.04.4~14.04.1+esm1Not reportedUBUNTU-CVE-2019-9674Not reported
Ubuntupython2.7deb16.042.7.12-1ubuntu0~16.04.12Not reportedUBUNTU-CVE-2019-9674Not reported
Ubuntupython3.5deb16.043.5.2-2ubuntu0~16.04.11Not reportedUBUNTU-CVE-2019-9674Not reported
Ubuntupython2.7deb18.042.7.17-1~18.04ubuntu1.1Not reportedUBUNTU-CVE-2019-9674Not reported
Ubuntupython3.6deb18.043.6.9-1~18.04ubuntu1.1Not reportedUBUNTU-CVE-2019-9674Not reported
Ubuntupython3.7debpro3.7.5-2ubuntu1~18.04.2+esm3Not reportedUBUNTU-CVE-2019-9674Not reported
Ubuntupython2.7deb20.042.7.18-1~20.04.1Not reportedUBUNTU-CVE-2019-9674Not reported
Susepythonrpmlinux enterprise module for basesystem 15 sp12.7.17-7.35.1Not reportedSUSE-SU-2020:0510-1Not reported
Susepython-baserpmlinux enterprise module for basesystem 15 sp12.7.17-7.35.1Not reportedSUSE-SU-2020:0510-1Not reported
Susepythonrpmlinux enterprise module for desktop applications 15 sp12.7.17-7.35.1Not reportedSUSE-SU-2020:0510-1Not reported
Susepythonrpmlinux enterprise module for python 2 15 sp12.7.17-7.35.1Not reportedSUSE-SU-2020:0510-1Not reported
Susepython-baserpmlinux enterprise module for python 2 15 sp12.7.17-7.35.1Not reportedSUSE-SU-2020:0510-1Not reported
Susepython3rpmlinux enterprise module for basesystem 15 sp13.6.10-3.47.2Not reportedSUSE-SU-2020:0467-1Not reported
Susepython3-baserpmlinux enterprise module for basesystem 15 sp13.6.10-3.47.2Not reportedSUSE-SU-2020:0467-1Not reported
Susepython3-baserpmlinux enterprise module for development tools 15 sp13.6.10-3.47.2Not reportedSUSE-SU-2020:0467-1Not reported
Opensusepython3rpmleap 15.13.6.10-lp151.6.11.1Not reportedOPENSUSE-SU-2020:0274-1Not reported
Opensusepython3-baserpmleap 15.13.6.10-lp151.6.11.1Not reportedOPENSUSE-SU-2020:0274-1Not reported
Susepython36rpmlinux enterprise server 12 sp53.6.10-4.6.1Not reportedSUSE-SU-2020:0557-1Not reported
Susepython36-baserpmlinux enterprise server 12 sp53.6.10-4.6.1Not reportedSUSE-SU-2020:0557-1Not reported
Susepython36rpmlinux enterprise server for sap applications 12 sp53.6.10-4.6.1Not reportedSUSE-SU-2020:0557-1Not reported
Susepython36-baserpmlinux enterprise server for sap applications 12 sp53.6.10-4.6.1Not reportedSUSE-SU-2020:0557-1Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]