UpHeron
All vulnerabilities

Servers and applications

CVE-2018-1061

python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in the difflib.IS_LINE_JUNK method. An attacker could use this flaw to cause denial of service.

Severity
High 7.5
Published
19 Jun 2018
Last changed
15 Oct 2026
Added to UpHeron
21 Oct 2026
Fixed in
2.7.15, 3.4.9
Sources
NVD

Affected software

SoftwareAffected versions
PythonServers and applications · cpe:a:python:python
  • Version 3.7.0-rc1
  • Version 3.7.0-beta5
  • Version 3.7.0-beta4
  • Version 3.7.0-beta3
All 14 release lines
  • Every version before 2.7.15
  • From 3.0 before 3.4.9
  • From 3.5.0 up to 3.5.5
  • From 3.6 up to 3.6.4
  • Version 3.7.0-alpha1
  • Version 3.7.0-alpha2
  • Version 3.7.0-alpha3
  • Version 3.7.0-alpha4
  • Version 3.7.0-beta1
  • Version 3.7.0-beta2
  • Version 3.7.0-beta3
  • Version 3.7.0-beta4
  • Version 3.7.0-beta5
  • Version 3.7.0-rc1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2018-1061
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2018-1061