CVE-2020-27619: Critical severity python 2.7 vulnerability
An unspecified error with CJK codec tests call eval() on content retrieved throug HTTP in multibytecodecsupport.py in Python has an unknown impact and attack vector.
Other sources
In Python 3 through 3.9.0, the Lib/test/multibytecodecsupport.py CJK codec tests call eval() on content retrieved via HTTP.
In Python3's Lib/test/multibytecodecsupport.py CJK codec tests call eval() on content retrieved via HTTP.
Affected Software
Remediation
Information
Patch Available
Patch Available
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2020-27619?
The severity of CVE-2020-27619 is critical with a CVSS score of 9.8.
How does CVE-2020-27619 impact Python?
CVE-2020-27619 is an unspecified error with CJK codec tests in Python that calls eval() on content retrieved through HTTP, with an unknown impact and attack vector.
Which versions of Python are affected by CVE-2020-27619?
Python versions 3.6.13, 3.7.10, 3.8.7, and 3.9.1 are affected by CVE-2020-27619.
What is the recommended remedy for CVE-2020-27619 in Python?
To fix CVE-2020-27619 in Python, update to the following versions or later: 3.6.14, 3.7.11, 3.8.8, or 3.9.2.
Where can I find more information about CVE-2020-27619?
You can find more information about CVE-2020-27619 at the following references: [Link 1](https://bugs.python.org/issue41944), [Link 2](https://github.com/python/cpython/commit/2ef5caa58febc8968e670e39e3d37cf8eef3cab8), [Link 3](https://github.com/python/cpython/commit/b664a1df4ee71d3760ab937653b10997081b1794).