VULNERABILITY INTELLIGENCE

CVE-2018-1060

CVSS score7.5 HIGH
EPSS probability5.04%
CISA KEVNot currently listed
Published2018-06-18
Last modified2026-10-08
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Description

python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in pop3lib's apop() method. An attacker could use this flaw to cause denial of service.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references