Python up to 3.6.10/3.7.8/3.8.4rc1/3.9.0b4 on Windows python3.dll Search Path uncontrolled search path

Summaryinfo

A vulnerability, which was classified as critical, has been found in Python up to 3.6.10/3.7.8/3.8.4rc1/3.9.0b4 on Windows. This vulnerability affects unknown code in the library python3.dll. The manipulation as part of Search Path leads to uncontrolled search path. This vulnerability is referenced as CVE-2020-15523. The attack can only be performed from a local environment. No exploit is available.

Detailsinfo

A vulnerability, which was classified as critical, has been found in Python up to 3.6.10/3.7.8/3.8.4rc1/3.9.0b4 on Windows (Programming Language Software). This issue affects an unknown functionality in the library python3.dll. The manipulation as part of a Search Path leads to a uncontrolled search path vulnerability. Using CWE to declare the problem leads to CWE-427. The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors. Impacted is confidentiality, integrity, and availability. The summary by CVE is:

In Python 3.6 through 3.6.10, 3.7 through 3.7.8, 3.8 through 3.8.4rc1, and 3.9 through 3.9.0b4 on Windows, a Trojan horse python3.dll might be used in cases where CPython is embedded in a native application. This occurs because python3X.dll may use an invalid search path for python3.dll loading (after Py_SetPath has been used). NOTE: this issue CANNOT occur when using python.exe from a standard (non-embedded) Python installation on Windows.

The weakness was published 07/04/2020. The identification of this vulnerability is CVE-2020-15523 since 07/04/2020. Attacking locally is a requirement. The successful exploitation needs a simple authentication. Technical details of the vulnerability are known, but there is no available exploit. The attack technique deployed by this issue is T1574 according to MITRE ATT&CK.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Type

• Programming Language Software

Name

• Python

Version

• 3.6.0
• 3.6.1
• 3.6.2
• 3.6.3
• 3.6.4
• 3.6.5
• 3.6.6
• 3.6.7
• 3.6.8
• 3.6.9
• 3.6.10
• 3.7.0
• 3.7.1
• 3.7.2
• 3.7.3
• 3.7.4
• 3.7.5
• 3.7.6
• 3.7.7
• 3.7.8
• 3.8.4rc1
• 3.9.0b4

License

• open-source

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion