CVE-2019-17514

一、漏洞信息
 漏洞编号：[CVE-2019-17514](https://nvd.nist.gov/vuln/detail/CVE-2019-17514)
 漏洞归属组件：python3
 漏洞归属的版本：3.7.4,3.8.5
 CVSS V3.0分值：
  BaseScore：7.5 High
  Vector：CVSS：3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
 漏洞简述：
  library/glob.html in the Python 2 and 3 documentation before 2016 has potentially misleading information about whether sorting occurs, as demonstrated by irreproducible cancer-research results. NOTE: the effects of this documentation cross application domains, and thus it is likely that security-relevant code elsewhere is affected. This issue is not a Python implementation bug, and there are no reports that NMR researchers were specifically relying on library/glob.html. In other words, because the older documentation stated finds all the pathnames matching a specified pattern according to the rules used by the Unix shell, one might have incorrectly inferred that the sorting that occurs in a Unix shell also occurred for glob.glob. There is a workaround in newer versions of Willoughby nmr-data_compilation-p2.py and nmr-data_compilation-p3.py, which call sort() directly.
 漏洞公开时间：2019-10-12
 漏洞创建时间：2021-05-13 14:34:14
 漏洞详情参考链接：
  https://nvd.nist.gov/vuln/detail/CVE-2019-17514
 漏洞分析指导链接：
  https://gitee.com/openeuler/cve-manager/blob/master/doc/md/manual.md
二、漏洞分析结构反馈
 影响性分析说明：
    eddd测试sssss 
 openEuler评分：
  7.5
 Vector：CVSS：3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
 受影响版本排查(受影响/不受影响)：
  1.openEuler-20.03-LTS:受影响
2.openEuler-20.09:受影响

cve-test/python3

内容风险标识

评论 (27)

cve-test/python3 .gitee-modal { width: 500px !important; }

内容风险标识

CVE-2019-17514

评论 (27)

搜索帮助

cve-test/python3