U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

Vulnerability Change Records for CVE-2016-5699

Change History

Modified Analysis by NIST 9/02/2016 4:45:02 PM

Action Type Old Value New Value
Added CPE Configuration

								
							
							
						
Configuration 1
     OR
          *cpe:2.3:a:python:python:2.7.9:*:*:*:*:*:*:* (and previous)
Configuration 2
     OR
          *cpe:2.3:a:python:python:3.0:*:*:*:*:*:*:*
          *cpe:2.3:a:python:python:3.0.1:*:*:*:*:*:*:*
          *cpe:2.3:a:python:python:3.1.0:*:*:*:*:*:*:*
          *cpe:2.3:a:python:python:3.1.1:*:*:*:*:*:*:*
          *cpe:2.3:a:python:python:3.1.2:*:*:*:*:*:*:*
          *cpe:2.3:a:python:python:3.1.3:*:*:*:*:*:*:*
          *cpe:2.3:a:python:python:3.1.4:*:*:*:*:*:*:*
          *cpe:2.3:a:python:python:3.1.5:*:*:*:*:*:*:*
          *cpe:2.3:a:python:python:3.2.0:*:*:*:*:*:*:*
          *cpe:2.3:a:python:python:3.2.1:*:*:*:*:*:*:*
          *cpe:2.3:a:python:python:3.2.2:*:*:*:*:*:*:*
          *cpe:2.3:a:python:python:3.2.3:*:*:*:*:*:*:*
          *cpe:2.3:a:python:python:3.2.4:*:*:*:*:*:*:*
          *cpe:2.3:a:python:python:3.2.5:*:*:*:*:*:*:*
          *cpe:2.3:a:python:python:3.2.6:*:*:*:*:*:*:*
          *cpe:2.3:a:python:python:3.3.0:*:*:*:*:*:*:*
          *cpe:2.3:a:python:python:3.3.1:*:*:*:*:*:*:*
          *cpe:2.3:a:python:python:3.3.2:*:*:*:*:*:*:*
          *cpe:2.3:a:python:python:3.3.3:*:*:*:*:*:*:*
          *cpe:2.3:a:python:python:3.3.4:*:*:*:*:*:*:*
          *cpe:2.3:a:python:python:3.3.5:*:*:*:*:*:*:*
          *cpe:2.3:a:python:python:3.3.6:*:*:*:*:*:*:*
          *cpe:2.3:a:python:python:3.4.0:*:*:*:*:*:*:*
          *cpe:2.3:a:python:python:3.4.1:*:*:*:*:*:*:*
          *cpe:2.3:a:python:python:3.4.2:*:*:*:*:*:*:*
          *cpe:2.3:a:python:python:3.4.3:*:*:*:*:*:*:*
Added CVSS V2

								
							
							
						
(AV:N/AC:M/Au:N/C:N/I:P/A:N)
Added CVSS V3

								
							
							
						
AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Added CWE

								
							
							
						
CWE-113
Changed Reference Type
http://blog.blindspotsecurity.com/2016/06/advisory-http-header-injection-in.html No Types Assigned
http://blog.blindspotsecurity.com/2016/06/advisory-http-header-injection-in.html Third Party Advisory, Exploit
Changed Reference Type
http://www.openwall.com/lists/oss-security/2016/06/14/7 No Types Assigned
http://www.openwall.com/lists/oss-security/2016/06/14/7 Mailing List
Changed Reference Type
http://www.openwall.com/lists/oss-security/2016/06/15/12 No Types Assigned
http://www.openwall.com/lists/oss-security/2016/06/15/12 Mailing List
Changed Reference Type
http://www.openwall.com/lists/oss-security/2016/06/16/2 No Types Assigned
http://www.openwall.com/lists/oss-security/2016/06/16/2 Mailing List
Changed Reference Type
https://docs.python.org/3.4/whatsnew/changelog.html#python-3-4-4 No Types Assigned
https://docs.python.org/3.4/whatsnew/changelog.html#python-3-4-4 Release Notes
Changed Reference Type
https://hg.python.org/cpython/raw-file/v2.7.10/Misc/NEWS No Types Assigned
https://hg.python.org/cpython/raw-file/v2.7.10/Misc/NEWS Release Notes
Changed Reference Type
https://hg.python.org/cpython/rev/1c45047c5102 No Types Assigned
https://hg.python.org/cpython/rev/1c45047c5102 Patch
Changed Reference Type
https://hg.python.org/cpython/rev/bf3e1c9b80e9 No Types Assigned
https://hg.python.org/cpython/rev/bf3e1c9b80e9 Patch