CVE-2020-27619: python +2 lainnya

csirt@kutim:~/threat-intel/cve/CVE-2020-27619

CVSS 9.8 · Critical EPSS 8,3%

Kerentanan pada python, fedoraproject fedora +1 lainnya. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

In Python 3 through 3.9.0, the Lib/test/multibytecodec_support.py CJK codec tests call eval() on content retrieved via HTTP.

Rincian

Terbit di NVD: 22 Oktober 2020
Terakhir diubah: 8 Oktober 2026
Status NVD: Modified
CVSS 3.1: 9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
EPSS (30 hari): 8,3% peluang dieksploitasi; lebih tinggi dari 94,8% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
python	python	Versi 3.0.0 hingga sebelum 3.6.13
python	python	Versi 3.7.0 hingga sebelum 3.7.10
python	python	Versi 3.8.0 hingga sebelum 3.8.7
python	python	Versi 3.9.0 hingga sebelum 3.9.1
fedoraproject	fedora	Versi 33
fedoraproject	fedora	Versi 34
oracle	communications cloud native core network function cloud native environment	Versi 22.2.0

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://bugs.python.org/issue41944 issue tracking · patch · advisory vendor
https://github.com/python/cpython/commit/2ef5caa58febc8968e670e39e3d37cf8eef3cab8 patch · advisory vendor
https://github.com/python/cpython/commit/43e523103886af66d6c27cd72431b5d9d14cd2a9 patch · advisory vendor
https://github.com/python/cpython/commit/6c6c256df3636ff6f6136820afaefa5a10a3ac33 patch · advisory vendor
https://github.com/python/cpython/commit/b664a1df4ee71d3760ab937653b10997081b1794 patch · advisory vendor
https://github.com/python/cpython/commit/e912e945f2960029d039d3390ea08835ad39374b patch · advisory vendor
https://www.oracle.com/security-alerts/cpujul2022.html patch · advisory pihak ketiga
https://security.netapp.com/advisory/ntap-20201123-0004/ advisory pihak ketiga
https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.boo...
https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.boo...
https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.a...
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RSLQD5CCM75IZ...
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SGIY6I4YS3WOX...
https://security.gentoo.org/glsa/202402-04

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 9 Okt 2026, 12:28 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.