CVE-2016-5699

4.3

MEDIUMCVSS v2

Published

September 2, 2016

Affected

5 projects

Assigned by

Red Hat

Severity scale

010

Description

CRLF injection vulnerability in the HTTPConnection.putheader function in urllib2 and urllib in CPython (aka Python) before 2.7.10 and 3.x before 3.4.4 allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in a URL.

Python

ChocolateyPython is a programming language that lets you work more quickly and integrate your systems more effectively. You can learn to use Python and see almost immediate gains in productivity and lower maintenance costs. ## Notes - This package depends on the the latest major version of python package. - This package do not support package parameters, please install the package [python315](https://chocolatey.org/packages/python315) directly when using package parameters. - **If the package is out of date please check [Version History](#versionhistory) for the latest submitted version. If you have a question, please ask it in [Chocolatey Community Package Discussions](https://github.com/chocolatey-community/chocolatey-packages/discussions) or raise an issue on the [Chocolatey Community Packages Repository](https://github.com/chocolatey-community/chocolatey-packages/issues) if you have problems with the package. Disqus comments will generally not be responded to.**

<= 2.7.9, = 3.1.1, = 3.3.2, = 3.0, = 3.0.1, = 3.2.2, = 3.1.0, = 3.2.5, = 3.1.5, = 3.3.6, = 3.2.3, = 3.3.3, = 3.3.4, = 3.1.2, = 3.1.3, = 3.2.4, = 3.3.5, = 3.2.0, = 3.2.1, = 3.3.1, = 3.4.2, = 3.4.3, = 3.1.4, = 3.2.6, = 3.3.0, = 3.4.0, = 3.4.1NVD

Python

Visual Studio Marketplace

More on this CVE

NVD↗GitHub Advisory↗

Python language support with extension access points for IntelliSense (Pylance), Debugging (Python Debugger), linting, formatting, refactoring, unit tests, and more.

<= 2.7.9, = 3.1.1, = 3.3.2, = 3.0, = 3.0.1, = 3.2.2, = 3.1.0, = 3.2.5, = 3.1.5, = 3.3.6, = 3.2.3, = 3.3.3, = 3.3.4, = 3.1.2, = 3.1.3, = 3.2.4, = 3.3.5, = 3.2.0, = 3.2.1, = 3.3.1, = 3.4.2, = 3.4.3, = 3.1.4, = 3.2.6, = 3.3.0, = 3.4.0, = 3.4.1NVD

python

NuGet GalleryInstalls 64-bit Python for use in build scenarios.

<= 2.7.9, = 3.1.1, = 3.3.2, = 3.0, = 3.0.1, = 3.2.2, = 3.1.0, = 3.2.5, = 3.1.5, = 3.3.6, = 3.2.3, = 3.3.3, = 3.3.4, = 3.1.2, = 3.1.3, = 3.2.4, = 3.3.5, = 3.2.0, = 3.2.1, = 3.3.1, = 3.4.2, = 3.4.3, = 3.1.4, = 3.2.6, = 3.3.0, = 3.4.0, = 3.4.1NVD

python

NPMInteract with a long-running python child process

<= 2.7.9, = 3.1.1, = 3.3.2, = 3.0, = 3.0.1, = 3.2.2, = 3.1.0, = 3.2.5, = 3.1.5, = 3.3.6, = 3.2.3, = 3.3.3, = 3.3.4, = 3.1.2, = 3.1.3, = 3.2.4, = 3.3.5, = 3.2.0, = 3.2.1, = 3.3.1, = 3.4.2, = 3.4.3, = 3.1.4, = 3.2.6, = 3.3.0, = 3.4.0, = 3.4.1NVD

python

RubyGemsPython implemented purely in Ruby without any library

<= 2.7.9, = 3.1.1, = 3.3.2, = 3.0, = 3.0.1, = 3.2.2, = 3.1.0, = 3.2.5, = 3.1.5, = 3.3.6, = 3.2.3, = 3.3.3, = 3.3.4, = 3.1.2, = 3.1.3, = 3.2.4, = 3.3.5, = 3.2.0, = 3.2.1, = 3.3.1, = 3.4.2, = 3.4.3, = 3.1.4, = 3.2.6, = 3.3.0, = 3.4.0, = 3.4.1NVD

Security Advisories

CVE-2016-5699

Description

More on this CVE