p PatchFirst

CVE-2023-27043

CVE-2023-27043

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

The email module of Python through 3.11.3 incorrectly parses e-mail addresses that contain a special character. The wrong portion of an RFC2822 header is identified as the value of the addr-spec. In some applications, an attacker can bypass a protection mechanism in which application access is granted only after verifying receipt of e-mail to a specific domain (e.g., only @company.example.com addresses may be used for signup). This occurs in email/_parseaddr.py in recent versions of Python.

CVSS 5.3 · Medium · EPSS 2.5% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • pypy3 Debian:12

    Versions
    • 7.3.11+dfsg-2
    • 7.3.11+dfsg-2+deb12u1
    • 7.3.11+dfsg-2+deb12u2
    Affected ranges
    • ECOSYSTEM: < 7.3.11+dfsg-2+deb12u3

    Update to 7.3.11+dfsg-2+deb12u3

  • pypy3 Debian:13

    Affected ranges
    • ECOSYSTEM: < 7.3.17+dfsg-3

    Update to 7.3.17+dfsg-3

  • pypy3 Debian:14

    Affected ranges
    • ECOSYSTEM: < 7.3.17+dfsg-3

    Update to 7.3.17+dfsg-3

  • python3.11 Debian:12

    Versions
    • 3.11.2-6
    • 3.11.2-6+deb12u1
    • 3.11.2-6+deb12u2
    • 3.11.2-6+deb12u3
    • 3.11.2-6+deb12u4
    Affected ranges
    • ECOSYSTEM: < 3.11.2-6+deb12u5

    Update to 3.11.2-6+deb12u5

  • python2.7 Ubuntu:Pro:14.04:LTS

    Versions
    • 2.7.5-8ubuntu3
    • 2.7.5-8ubuntu4
    • 2.7.6-2
    • 2.7.6-2ubuntu1
    • 2.7.6-3
    • 2.7.6-3ubuntu1
    • 2.7.6-4
    • 2.7.6-4ubuntu1
    • 2.7.6-5
    • 2.7.6-7
    • 2.7.6-8
    • 2.7.6-8ubuntu0.2
    • 2.7.6-8ubuntu0.3
    • 2.7.6-8ubuntu0.4
    • 2.7.6-8ubuntu0.5
    • 2.7.6-8ubuntu0.6+esm2
    • 2.7.6-8ubuntu0.6+esm3
    • 2.7.6-8ubuntu0.6+esm5
    • 2.7.6-8ubuntu0.6+esm6
    • 2.7.6-8ubuntu0.6+esm7
    • 2.7.6-8ubuntu0.6+esm8
    • 2.7.6-8ubuntu0.6+esm9
    • 2.7.6-8ubuntu0.6+esm10
    • 2.7.6-8ubuntu0.6+esm11
    • 2.7.6-8ubuntu0.6+esm12
    • 2.7.6-8ubuntu0.6+esm13
    • 2.7.6-8ubuntu0.6+esm14
    • 2.7.6-8ubuntu0.6+esm15
    • 2.7.6-8ubuntu0.6+esm16
    • 2.7.6-8ubuntu0.6+esm17
    • 2.7.6-8ubuntu0.6+esm18
    Affected ranges
    • ECOSYSTEM: < 2.7.6-8ubuntu0.6+esm20

    Update to 2.7.6-8ubuntu0.6+esm20

  • python3.5 Ubuntu:Pro:14.04:LTS

    Versions
    • 3.5.2-2ubuntu0~16.04.4~14.04.1
    • 3.5.2-2ubuntu0~16.04.4~14.04.1+esm1
    Affected ranges
    • ECOSYSTEM: < 3.5.2-2ubuntu0~16.04.4~14.04.1+esm3

    Update to 3.5.2-2ubuntu0~16.04.4~14.04.1+esm3

  • python3.4 Ubuntu:Pro:14.04:LTS

    Versions
    • 3.4~b1-0ubuntu3
    • 3.4~b1-4ubuntu4
    • 3.4~b1-4ubuntu6
    • 3.4~b1-5ubuntu2
    • 3.4~b2-1
    • 3.4~b3-1ubuntu1
    • 3.4~rc1-1build1
    • 3.4~rc2-1
    • 3.4~rc3-0ubuntu1
    • 3.4.0-1
    • 3.4.0-2ubuntu1
    • 3.4.0-2ubuntu1.1
    • 3.4.3-1ubuntu1~14.04.1
    • 3.4.3-1ubuntu1~14.04.3
    • 3.4.3-1ubuntu1~14.04.4
    • 3.4.3-1ubuntu1~14.04.5
    • 3.4.3-1ubuntu1~14.04.6
    • 3.4.3-1ubuntu1~14.04.7
    • 3.4.3-1ubuntu1~14.04.7+esm2
    • 3.4.3-1ubuntu1~14.04.7+esm4
    • 3.4.3-1ubuntu1~14.04.7+esm6
    • 3.4.3-1ubuntu1~14.04.7+esm7
    • 3.4.3-1ubuntu1~14.04.7+esm8
    • 3.4.3-1ubuntu1~14.04.7+esm10
    • 3.4.3-1ubuntu1~14.04.7+esm11
    • 3.4.3-1ubuntu1~14.04.7+esm12
    • 3.4.3-1ubuntu1~14.04.7+esm13
    • 3.4.3-1ubuntu1~14.04.7+esm14
    • 3.4.3-1ubuntu1~14.04.7+esm15
    • 3.4.3-1ubuntu1~14.04.7+esm16
    • 3.4.3-1ubuntu1~14.04.7+esm17
    • 3.4.3-1ubuntu1~14.04.7+esm19
    • 3.4.3-1ubuntu1~14.04.7+esm20
    • 3.4.3-1ubuntu1~14.04.7+esm21
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • python2.7 Ubuntu:Pro:16.04:LTS

    Versions
    • 2.7.10-4ubuntu1
    • 2.7.10-4ubuntu2
    • 2.7.11-2
    • 2.7.11-3
    • 2.7.11-4
    • 2.7.11-6
    • 2.7.11-7
    • 2.7.11-7ubuntu1
    • 2.7.12-1~16.04
    • 2.7.12-1ubuntu0~16.04.1
    • 2.7.12-1ubuntu0~16.04.2
    • 2.7.12-1ubuntu0~16.04.3
    • 2.7.12-1ubuntu0~16.04.4
    • 2.7.12-1ubuntu0~16.04.8
    • 2.7.12-1ubuntu0~16.04.9
    • 2.7.12-1ubuntu0~16.04.11
    • 2.7.12-1ubuntu0~16.04.12
    • 2.7.12-1ubuntu0~16.04.13
    • 2.7.12-1ubuntu0~16.04.14
    • 2.7.12-1ubuntu0~16.04.16
    • 2.7.12-1ubuntu0~16.04.18
    • 2.7.12-1ubuntu0~16.04.18+esm1
    • 2.7.12-1ubuntu0~16.04.18+esm2
    • 2.7.12-1ubuntu0~16.04.18+esm3
    • 2.7.12-1ubuntu0~16.04.18+esm4
    • 2.7.12-1ubuntu0~16.04.18+esm5
    • 2.7.12-1ubuntu0~16.04.18+esm6
    • 2.7.12-1ubuntu0~16.04.18+esm7
    • 2.7.12-1ubuntu0~16.04.18+esm8
    • 2.7.12-1ubuntu0~16.04.18+esm9
    • 2.7.12-1ubuntu0~16.04.18+esm10
    • 2.7.12-1ubuntu0~16.04.18+esm11
    • 2.7.12-1ubuntu0~16.04.18+esm12
    • 2.7.12-1ubuntu0~16.04.18+esm13
    • 2.7.12-1ubuntu0~16.04.18+esm15
    • 2.7.12-1ubuntu0~16.04.18+esm16
    • 2.7.12-1ubuntu0~16.04.18+esm17
    Affected ranges
    • ECOSYSTEM: < 2.7.12-1ubuntu0~16.04.18+esm18

    Update to 2.7.12-1ubuntu0~16.04.18+esm18

  • python3.5 Ubuntu:Pro:16.04:LTS

    Versions
    • 3.5.0-3
    • 3.5.0-3ubuntu1
    • 3.5.1~rc1-2ubuntu1
    • 3.5.1-1
    • 3.5.1-2
    • 3.5.1-3
    • 3.5.1-5
    • 3.5.1-6ubuntu1
    • 3.5.1-6ubuntu2
    • 3.5.1-9ubuntu1
    • 3.5.1-10
    • 3.5.2-2~16.01
    • 3.5.2-2~16.04
    • 3.5.2-2ubuntu0~16.04.1
    • 3.5.2-2ubuntu0~16.04.2
    • 3.5.2-2ubuntu0~16.04.3
    • 3.5.2-2ubuntu0~16.04.4
    • 3.5.2-2ubuntu0~16.04.5
    • 3.5.2-2ubuntu0~16.04.8
    • 3.5.2-2ubuntu0~16.04.9
    • 3.5.2-2ubuntu0~16.04.10
    • 3.5.2-2ubuntu0~16.04.11
    • 3.5.2-2ubuntu0~16.04.12
    • 3.5.2-2ubuntu0~16.04.13
    • 3.5.2-2ubuntu0~16.04.13+esm1
    • 3.5.2-2ubuntu0~16.04.13+esm2
    • 3.5.2-2ubuntu0~16.04.13+esm3
    • 3.5.2-2ubuntu0~16.04.13+esm5
    • 3.5.2-2ubuntu0~16.04.13+esm6
    • 3.5.2-2ubuntu0~16.04.13+esm7
    • 3.5.2-2ubuntu0~16.04.13+esm8
    • 3.5.2-2ubuntu0~16.04.13+esm9
    • 3.5.2-2ubuntu0~16.04.13+esm10
    • 3.5.2-2ubuntu0~16.04.13+esm11
    • 3.5.2-2ubuntu0~16.04.13+esm12
    • 3.5.2-2ubuntu0~16.04.13+esm13
    • 3.5.2-2ubuntu0~16.04.13+esm14
    Affected ranges
    • ECOSYSTEM: < 3.5.2-2ubuntu0~16.04.13+esm15

    Update to 3.5.2-2ubuntu0~16.04.13+esm15

  • python2.7 Ubuntu:Pro:18.04:LTS

    Versions
    • 2.7.14-2ubuntu2
    • 2.7.14-4
    • 2.7.14-6
    • 2.7.14-7
    • 2.7.14-8
    • 2.7.15~rc1-1
    • 2.7.15~rc1-1ubuntu0.1
    • 2.7.15-4ubuntu4~18.04
    • 2.7.15-4ubuntu4~18.04.1
    • 2.7.15-4ubuntu4~18.04.2
    • 2.7.17-1~18.04
    • 2.7.17-1~18.04ubuntu1
    • 2.7.17-1~18.04ubuntu1.1
    • 2.7.17-1~18.04ubuntu1.2
    • 2.7.17-1~18.04ubuntu1.3
    • 2.7.17-1~18.04ubuntu1.5
    • 2.7.17-1~18.04ubuntu1.6
    • 2.7.17-1~18.04ubuntu1.7
    • 2.7.17-1~18.04ubuntu1.8
    • 2.7.17-1~18.04ubuntu1.10
    • 2.7.17-1~18.04ubuntu1.11
    • 2.7.17-1~18.04ubuntu1.13
    • 2.7.17-1~18.04ubuntu1.13+esm1
    • 2.7.17-1~18.04ubuntu1.13+esm2
    • 2.7.17-1~18.04ubuntu1.13+esm3
    • 2.7.17-1~18.04ubuntu1.13+esm4
    • 2.7.17-1~18.04ubuntu1.13+esm5
    • 2.7.17-1~18.04ubuntu1.13+esm6
    • 2.7.17-1~18.04ubuntu1.13+esm7
    • 2.7.17-1~18.04ubuntu1.13+esm8
    • 2.7.17-1~18.04ubuntu1.13+esm10
    • 2.7.17-1~18.04ubuntu1.13+esm11
    • 2.7.17-1~18.04ubuntu1.13+esm12
    Affected ranges
    • ECOSYSTEM: < 2.7.17-1~18.04ubuntu1.13+esm13

    Update to 2.7.17-1~18.04ubuntu1.13+esm13

  • python3.6 Ubuntu:Pro:18.04:LTS

    Versions
    • 3.6.3-1ubuntu1
    • 3.6.4~rc1-1
    • 3.6.4~rc1-2
    • 3.6.4-1
    • 3.6.4-2
    • 3.6.4-3build1
    • 3.6.4-4
    • 3.6.5~rc1-1
    • 3.6.5-3
    • 3.6.6-1~18.04
    • 3.6.7-1~18.04
    • 3.6.8-1~18.04.1
    • 3.6.8-1~18.04.2
    • 3.6.8-1~18.04.3
    • 3.6.9-1~18.04
    • 3.6.9-1~18.04ubuntu1
    • 3.6.9-1~18.04ubuntu1.1
    • 3.6.9-1~18.04ubuntu1.3
    • 3.6.9-1~18.04ubuntu1.4
    • 3.6.9-1~18.04ubuntu1.6
    • 3.6.9-1~18.04ubuntu1.7
    • 3.6.9-1~18.04ubuntu1.8
    • 3.6.9-1~18.04ubuntu1.9
    • 3.6.9-1~18.04ubuntu1.10
    • 3.6.9-1~18.04ubuntu1.12
    • 3.6.9-1~18.04ubuntu1.13
    • 3.6.9-1~18.04ubuntu1.13+esm1
    • 3.6.9-1~18.04ubuntu1.13+esm2
    • 3.6.9-1~18.04ubuntu1.13+esm3
    • 3.6.9-1~18.04ubuntu1.13+esm4
    • 3.6.9-1~18.04ubuntu1.13+esm5
    • 3.6.9-1~18.04ubuntu1.13+esm6
    • 3.6.9-1~18.04ubuntu1.13+esm7
    • 3.6.9-1~18.04ubuntu1.13+esm8
    • 3.6.9-1~18.04ubuntu1.13+esm9
    • 3.6.9-1~18.04ubuntu1.13+esm10
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • python3.7 Ubuntu:Pro:18.04:LTS

    Versions
    • 3.7.0~a2-1
    • 3.7.0~a3-1
    • 3.7.0~a3-2
    • 3.7.0~a3-3
    • 3.7.0~a4-1
    • 3.7.0~b1-1
    • 3.7.0~b1-1build1
    • 3.7.0~b2-1
    • 3.7.0~b3-1
    • 3.7.0-1~18.04
    • 3.7.1-1~18.04
    • 3.7.3-2~18.04.1
    • 3.7.5-2~18.04
    • 3.7.5-2~18.04.4
    • 3.7.5-2ubuntu1~18.04.2
    • 3.7.5-2ubuntu1~18.04.2+esm1
    • 3.7.5-2ubuntu1~18.04.2+esm2
    • 3.7.5-2ubuntu1~18.04.2+esm3
    • 3.7.5-2ubuntu1~18.04.2+esm4
    • 3.7.5-2ubuntu1~18.04.2+esm5
    • 3.7.5-2ubuntu1~18.04.2+esm6
    • 3.7.5-2ubuntu1~18.04.2+esm7
    • 3.7.5-2ubuntu1~18.04.2+esm8
    • 3.7.5-2ubuntu1~18.04.2+esm9
    • 3.7.5-2ubuntu1~18.04.2+esm10
    • 3.7.5-2ubuntu1~18.04.2+esm11
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • python3.8 Ubuntu:Pro:18.04:LTS

    Versions
    • 3.8.0-3~18.04
    • 3.8.0-3~18.04.1
    • 3.8.0-3ubuntu1~18.04.2
    • 3.8.0-3ubuntu1~18.04.2+esm1
    • 3.8.0-3ubuntu1~18.04.2+esm2
    • 3.8.0-3ubuntu1~18.04.2+esm3
    • 3.8.0-3ubuntu1~18.04.2+esm4
    • 3.8.0-3ubuntu1~18.04.2+esm5
    • 3.8.0-3ubuntu1~18.04.2+esm6
    • 3.8.0-3ubuntu1~18.04.2+esm7
    • 3.8.0-3ubuntu1~18.04.2+esm8
    • 3.8.0-3ubuntu1~18.04.2+esm9
    • 3.8.0-3ubuntu1~18.04.2+esm10
    • 3.8.0-3ubuntu1~18.04.2+esm11
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • python3.8 Ubuntu:20.04:LTS

    Versions
    • 3.8.0-1
    • 3.8.0-2
    • 3.8.0-3
    • 3.8.0-4
    • 3.8.0-5
    • 3.8.1-2ubuntu3
    • 3.8.2~rc1-1ubuntu1
    • 3.8.2-1
    • 3.8.2-1ubuntu1
    • 3.8.2-1ubuntu1.1
    • 3.8.2-1ubuntu1.2
    • 3.8.5-1~20.04
    • 3.8.5-1~20.04.2
    • 3.8.5-1~20.04.3
    • 3.8.10-0ubuntu1~20.04
    • 3.8.10-0ubuntu1~20.04.1
    • 3.8.10-0ubuntu1~20.04.2
    • 3.8.10-0ubuntu1~20.04.4
    • 3.8.10-0ubuntu1~20.04.5
    • 3.8.10-0ubuntu1~20.04.6
    • 3.8.10-0ubuntu1~20.04.7
    • 3.8.10-0ubuntu1~20.04.8
    • 3.8.10-0ubuntu1~20.04.9
    • 3.8.10-0ubuntu1~20.04.10
    • 3.8.10-0ubuntu1~20.04.11
    Affected ranges
    • ECOSYSTEM: < 3.8.10-0ubuntu1~20.04.12

    Update to 3.8.10-0ubuntu1~20.04.12

  • python2.7 Ubuntu:Pro:20.04:LTS

    Versions
    • 2.7.17~rc1-1
    • 2.7.17-1
    • 2.7.17-1ubuntu5
    • 2.7.17-1ubuntu6
    • 2.7.18~rc1-2
    • 2.7.18-1~20.04
    • 2.7.18-1~20.04.1
    • 2.7.18-1~20.04.1+esm1
    • 2.7.18-1~20.04.3
    • 2.7.18-1~20.04.3+esm1
    • 2.7.18-1~20.04.4
    • 2.7.18-1~20.04.4+esm1
    • 2.7.18-1~20.04.4+esm2
    Affected ranges
    • ECOSYSTEM: < 2.7.18-1~20.04.4+esm3

    Update to 2.7.18-1~20.04.4+esm3

  • python3.9 Ubuntu:Pro:20.04:LTS

    Versions
    • 3.9.0~rc1-1~20.04
    • 3.9.0-5~20.04
    • 3.9.5-3~20.04.1
    • 3.9.5-3ubuntu0~20.04.1
    • 3.9.5-3ubuntu0~20.04.1+esm1
    • 3.9.5-3ubuntu0~20.04.1+esm2
    • 3.9.5-3ubuntu0~20.04.1+esm3
    • 3.9.5-3ubuntu0~20.04.1+esm4
    • 3.9.5-3ubuntu0~20.04.1+esm5
    • 3.9.5-3ubuntu0~20.04.1+esm6
    • 3.9.5-3ubuntu0~20.04.1+esm7
    • 3.9.5-3ubuntu0~20.04.1+esm8
    • 3.9.5-3ubuntu0~20.04.1+esm9
    • 3.9.5-3ubuntu0~20.04.1+esm10
    • 3.9.5-3ubuntu0~20.04.1+esm11
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • python3.10 Ubuntu:22.04:LTS

    Versions
    • 3.10.0-2
    • 3.10.0-3
    • 3.10.0-4
    • 3.10.0-5
    • 3.10.0-5build1
    • 3.10.1-1
    • 3.10.1-2
    • 3.10.2-1
    • 3.10.2-5
    • 3.10.2-7
    • 3.10.3-1
    • 3.10.4-3
    • 3.10.4-3ubuntu0.1
    • 3.10.6-1~22.04
    • 3.10.6-1~22.04.1
    • 3.10.6-1~22.04.2
    • 3.10.6-1~22.04.2ubuntu1
    • 3.10.6-1~22.04.2ubuntu1.1
    • 3.10.12-1~22.04.2
    • 3.10.12-1~22.04.3
    • 3.10.12-1~22.04.4
    • 3.10.12-1~22.04.5
    Affected ranges
    • ECOSYSTEM: < 3.10.12-1~22.04.6

    Update to 3.10.12-1~22.04.6

  • python2.7 Ubuntu:Pro:22.04:LTS

    Versions
    • 2.7.18-8build1
    • 2.7.18-13
    • 2.7.18-13ubuntu1
    • 2.7.18-13ubuntu1.1
    • 2.7.18-13ubuntu1.1+esm2
    • 2.7.18-13ubuntu1.2
    • 2.7.18-13ubuntu1.2+esm1
    • 2.7.18-13ubuntu1.2+esm2
    Affected ranges
    • ECOSYSTEM: < 2.7.18-13ubuntu1.2+esm3

    Update to 2.7.18-13ubuntu1.2+esm3

  • python3.11 Ubuntu:Pro:22.04:LTS

    Versions
    • 3.11.0~rc1-1~22.04
    • 3.11.0~rc1-1~22.04.1~esm1
    • 3.11.0~rc1-1~22.04.1~esm2
    • 3.11.0~rc1-1~22.04.1~esm3
    • 3.11.0~rc1-1~22.04.1~esm4
    • 3.11.0~rc1-1~22.04.1~esm5
    • 3.11.0~rc1-1~22.04.1~esm6
    • 3.11.0~rc1-1~22.04.1~esm7
    • 3.11.0~rc1-1~22.04.1~esm8
    • 3.11.0~rc1-1~22.04.1~esm9
    • 3.11.0~rc1-1~22.04.1
    • 3.11.0~rc1-1~22.04.1+esm1
    • 3.11.0~rc1-1~22.04.1+esm2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • python3.12 Ubuntu:24.04:LTS

    Versions
    • 3.12.0-1
    • 3.12.0-5
    • 3.12.0-6
    • 3.12.0-7
    • 3.12.1-2
    • 3.12.2-1
    • 3.12.2-4build3
    • 3.12.2-4build4
    • 3.12.2-5ubuntu3
    • 3.12.3-1
    • 3.12.3-1ubuntu0.1
    Affected ranges
    • ECOSYSTEM: < 3.12.3-1ubuntu0.2

    Update to 3.12.3-1ubuntu0.2

Original sources

Check your server →