CVE-2020-15523
High
Description
In Python 3.6 through 3.6.10, 3.7 through 3.7.8, 3.8 through 3.8.4rc1, and 3.9 through 3.9.0b4 on Windows, a Trojan horse python3.dll might be used in cases where CPython is embedded in a native application. This occurs because python3X.dll may use an invalid search path for python3.dll loading (after Py_SetPath has been used). NOTE: this issue CANNOT occur when using python.exe from a standard (non-embedded) Python installation on Windows.
SeverityHigh
CVSS7.8
Exploit probability60. percentile0.9%
Product
Python
PublishedJul 4, 2020
First seenJul 4, 2020
How to fix
Update
- python python3.5.10, 3.6.12, 3.7.9, 3.8.4 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| python python | 3.5.0 ≤ v < 3.5.10, 3.6.0 ≤ v < 3.6.12, 3.7.0 ≤ v < 3.7.9, 3.8.0 ≤ v < 3.8.4, 3.8.4, 3.9.0 | 3.5.10, 3.6.12, 3.7.9, 3.8.4 |
| netapp snapcenter | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.