UpHeron
All vulnerabilities

Servers and applications

CVE-2018-1060

python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in pop3lib's apop() method. An attacker could use this flaw to cause denial of service.

Severity
High 7.5
Published
18 Jun 2018
Last changed
8 Oct 2026
Added to UpHeron
21 Oct 2026
Fixed in
2.7.15, 3.4.9, 3.5.6, 3.6.5
Sources
NVD

Affected software

SoftwareAffected versions
PythonServers and applications · cpe:a:python:python
  • From 2.7.0 before 2.7.15
  • From 3.0.0 before 3.4.9
  • From 3.5.0 before 3.5.6
  • After 3.6.0 before 3.6.5

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2018-1060
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2018-1060