UpHeron
All vulnerabilities

Servers and applications

CVE-2018-1000117

Python Software Foundation CPython version From 3.2 until 3.6.4 on Windows contains a Buffer Overflow vulnerability in os.symlink() function on Windows that can result in Arbitrary code execution, likely escalation of privilege. This attack appears to be exploitable via a python script that creates a symlink with an attacker controlled name or location. This vulnerability appears to have been…

Severity
Medium 6.7
Published
7 Mar 2018
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Fixed in
3.4.9, 3.5.6, 3.6.5
Sources
NVD

Affected software

SoftwareAffected versions
PythonServers and applications · cpe:a:python:python
  • Version 3.7.0-beta5
  • Version 3.7.0-beta4
  • Version 3.7.0-beta3
  • Version 3.7.0-beta2
All 8 release lines
  • From 3.2.0 before 3.4.9
  • From 3.5.0 before 3.5.6
  • From 3.6.0 before 3.6.5
  • Version 3.7.0-beta1
  • Version 3.7.0-beta2
  • Version 3.7.0-beta3
  • Version 3.7.0-beta4
  • Version 3.7.0-beta5

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2018-1000117
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2018-1000117