CVE-2018-1061
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2018-1061
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in the difflib.IS_LINE_JUNK method. An attacker could use this flaw to cause denial of service.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
输入验证不恰当
Source: NVD (National Vulnerability Database)
Vulnerability Title
Python 资源管理错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Python是Python软件基金会的一套开源的、面向对象的程序设计语言。该语言具有可扩展、支持模块和包、支持多种平台等特点。 Python中的difflib.IS_LINE_JUNK方法存在资源管理错误漏洞。该漏洞源于网络系统或产品对系统资源（如内存、磁盘空间、文件等）的管理不当。以下产品及版本受到影响：Python 2.7.15版本，3.4.9版本，3.5.6rc1版本，3.6.5rc1版本，3.7.0版本。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2018-1061
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2018-1061
请登录查看更多情报信息。
Vendor Advisories for CVE-2018-1061 (9)
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1061x_refsource_CONFIRM
Mailing List Discussions for CVE-2018-1061 (6)
- http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.htmlvendor-advisoryx_refsource_SUSE
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JSKPGPZQNTAULHW4UH63KGOOUIDE4RRB/vendor-advisoryx_refsource_FEDORA
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AEZ5IQT7OF7Q2NCGIVABOWYGKO7YU3NJ/vendor-advisoryx_refsource_FEDORA
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/46PVWY5LFP4BRPG3BVQ5QEEFYBVEXHCK/vendor-advisoryx_refsource_FEDORA
Other References for CVE-2018-1061 (4)
- https://bugs.python.org/issue32981x_refsource_CONFIRM
Same Patch Batch · [UNKNOWN] · 2018-06-19 · 3 CVEs total
| CVE-2018-1117 | Red Hat oVirt Ansible Roles 权限许可和访问控制漏洞 | |
| CVE-2018-1073 | Red Hat ovirt-engine 信息泄露漏洞 |
IV. Related Vulnerabilities
Same weakness: CWE-20
- CVE-2026-45013
Apostrophe has a Weak Password Recovery Mechanism for Forgot - CVE-2026-54133
jmespath.php has CompilerRuntime code injection via unescape - CVE-2026-47196
Quest Bot: Empty automod rule causes every guild message to - CVE-2026-50633
Apache CXF: JNDI Injection vulnerability in DispatchMDBMessa - CVE-2026-50632
Apache CXF: JNDI Injection Vulnerability in JMSConfigFactory
V. Comments for CVE-2018-1061
No comments yet