CVE-2021-3426

lowpriority · track · 24EPSS 0.019 · 79 %ileDEEURUUS
grimoire priorityP3 · Track
Exploitable?
—
no known exploitation
Likely / severe?
1.88% (79th) EPSS
CVSS 2.7 · low
Is it mine?
136 products
Check your exposure
Who says so?
8 sources
cnnvd · enisa_euvd · fstec_bdu · osv

EPSS · scored 2026-10-27

There's a flaw in Python 3's pydoc. A local or adjacent attacker who discovers or is able to convince another local or adjacent user to start a pydoc server could access the server and use it to disclose sensitive information belonging to the other user that they would not normally be able to access. The highest risk of this flaw is to data confidentiality. This flaw affects Python versions before 3.8.9, Python versions before 3.9.3 and Python versions before 3.10.0a7.

01

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

  • Fixedplatform-python-0:3.6.8-41.el8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2021:4399
  • Fixedplatform-python-0:3.6.8-41.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2021:4399
  • Fixedplatform-python-0:3.6.8-41.el8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2021:4399
  • Fixedplatform-python-0:3.6.8-41.el8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2021:4399
  • Fixedplatform-python-0:3.6.8-41.el8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2021:4399
  • Fixedplatform-python-debug-0:3.6.8-41.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2021:4399
  • Fixedplatform-python-debug-0:3.6.8-41.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2021:4399
  • Fixedplatform-python-debug-0:3.6.8-41.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2021:4399
  • Fixedplatform-python-debug-0:3.6.8-41.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2021:4399
  • Fixedplatform-python-debug-0:3.6.8-41.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2021:4399
  • Fixedplatform-python-devel-0:3.6.8-41.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2021:4399
  • Fixedplatform-python-devel-0:3.6.8-41.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2021:4399
  • Fixedplatform-python-devel-0:3.6.8-41.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2021:4399
  • Fixedplatform-python-devel-0:3.6.8-41.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2021:4399
  • Fixedplatform-python-devel-0:3.6.8-41.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2021:4399
  • Fixedpython3-0:3.6.8-41.el8.src as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2021:4399
  • Fixedpython3-debuginfo-0:3.6.8-41.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2021:4399
  • Fixedpython3-debuginfo-0:3.6.8-41.el8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2021:4399
  • Fixedpython3-debuginfo-0:3.6.8-41.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2021:4399
  • Fixedpython3-debuginfo-0:3.6.8-41.el8.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2021:4399
  • Fixedpython3-debuginfo-0:3.6.8-41.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2021:4399
  • Fixedpython3-debuginfo-0:3.6.8-41.el8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2021:4399
  • Fixedpython3-debuginfo-0:3.6.8-41.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2021:4399
  • Fixedpython3-debuginfo-0:3.6.8-41.el8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2021:4399
  • Fixedpython3-debuginfo-0:3.6.8-41.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2021:4399
  • Fixedpython3-debuginfo-0:3.6.8-41.el8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2021:4399
  • Fixedpython3-debugsource-0:3.6.8-41.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2021:4399
  • Fixedpython3-debugsource-0:3.6.8-41.el8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2021:4399
  • Fixedpython3-debugsource-0:3.6.8-41.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2021:4399
  • Fixedpython3-debugsource-0:3.6.8-41.el8.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2021:4399
  • Fixedpython3-debugsource-0:3.6.8-41.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2021:4399
  • Fixedpython3-debugsource-0:3.6.8-41.el8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2021:4399
  • Fixedpython3-debugsource-0:3.6.8-41.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2021:4399
  • Fixedpython3-debugsource-0:3.6.8-41.el8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2021:4399
  • Fixedpython3-debugsource-0:3.6.8-41.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2021:4399
  • Fixedpython3-debugsource-0:3.6.8-41.el8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2021:4399
  • Fixedpython3-idle-0:3.6.8-41.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2021:4399
  • Fixedpython3-idle-0:3.6.8-41.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2021:4399
  • Fixedpython3-idle-0:3.6.8-41.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2021:4399
  • Fixedpython3-idle-0:3.6.8-41.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2021:4399
  • Fixedpython3-idle-0:3.6.8-41.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2021:4399
  • Fixedpython3-libs-0:3.6.8-41.el8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2021:4399
  • Fixedpython3-libs-0:3.6.8-41.el8.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2021:4399
  • Fixedpython3-libs-0:3.6.8-41.el8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2021:4399
  • Fixedpython3-libs-0:3.6.8-41.el8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2021:4399
  • Fixedpython3-libs-0:3.6.8-41.el8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2021:4399
  • Fixedpython3-test-0:3.6.8-41.el8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2021:4399
  • Fixedpython3-test-0:3.6.8-41.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2021:4399
  • Fixedpython3-test-0:3.6.8-41.el8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2021:4399
  • Fixedpython3-test-0:3.6.8-41.el8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2021:4399
  • Fixedpython3-test-0:3.6.8-41.el8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2021:4399
  • Fixedpython3-tkinter-0:3.6.8-41.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2021:4399
  • Fixedpython3-tkinter-0:3.6.8-41.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2021:4399
  • Fixedpython3-tkinter-0:3.6.8-41.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2021:4399
  • Fixedpython3-tkinter-0:3.6.8-41.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2021:4399
  • Fixedpython3-tkinter-0:3.6.8-41.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2021:4399
  • FixedSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)siemens_psirt

    Update to V3.1.5 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109478459/
  • FixedSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0)siemens_psirt

    Update to V3.1.5 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109478459/
  • FixedSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0)siemens_psirt

    Update to V3.1.5 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109478459/
  • FixedSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0)siemens_psirt

    Update to V3.1.5 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109478459/
  • FixedSIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0)siemens_psirt

    Update to V3.1.5 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109478459/
  • FixedSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)cisa_csaf_ot

    Update to V3.1.5 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109478459/
  • FixedSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0)cisa_csaf_ot

    Update to V3.1.5 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109478459/
  • FixedSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0)cisa_csaf_ot

    Update to V3.1.5 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109478459/
  • FixedSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0)cisa_csaf_ot

    Update to V3.1.5 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109478459/
  • FixedSIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0)cisa_csaf_ot

    Update to V3.1.5 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109478459/
  • MitigationSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)cisa_csaf_ot

    Only build and run applications from trusted sources.

  • MitigationSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0)cisa_csaf_ot

    Only build and run applications from trusted sources.

  • MitigationSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0)cisa_csaf_ot

    Only build and run applications from trusted sources.

  • MitigationSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0)cisa_csaf_ot

    Only build and run applications from trusted sources.

  • MitigationSIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0)cisa_csaf_ot

    Only build and run applications from trusted sources.

  • Workaroundplatform-python-0:3.6.8-41.el8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf

    Use the console (no argument needed) or HTML file (-w argument) output to generate docs rather than the HTTP server options. Put differently, do not use the -p or -n options of pydoc.

  • Workaroundplatform-python-0:3.6.8-41.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf

    Use the console (no argument needed) or HTML file (-w argument) output to generate docs rather than the HTTP server options. Put differently, do not use the -p or -n options of pydoc.

  • Workaroundplatform-python-0:3.6.8-41.el8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf

    Use the console (no argument needed) or HTML file (-w argument) output to generate docs rather than the HTTP server options. Put differently, do not use the -p or -n options of pydoc.

  • Workaroundplatform-python-0:3.6.8-41.el8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf

    Use the console (no argument needed) or HTML file (-w argument) output to generate docs rather than the HTTP server options. Put differently, do not use the -p or -n options of pydoc.

  • Workaroundplatform-python-0:3.6.8-41.el8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf

    Use the console (no argument needed) or HTML file (-w argument) output to generate docs rather than the HTTP server options. Put differently, do not use the -p or -n options of pydoc.

  • Workaroundplatform-python-debug-0:3.6.8-41.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf

    Use the console (no argument needed) or HTML file (-w argument) output to generate docs rather than the HTTP server options. Put differently, do not use the -p or -n options of pydoc.

  • Workaroundplatform-python-debug-0:3.6.8-41.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf

    Use the console (no argument needed) or HTML file (-w argument) output to generate docs rather than the HTTP server options. Put differently, do not use the -p or -n options of pydoc.

  • Workaroundplatform-python-debug-0:3.6.8-41.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf

    Use the console (no argument needed) or HTML file (-w argument) output to generate docs rather than the HTTP server options. Put differently, do not use the -p or -n options of pydoc.

  • Workaroundplatform-python-debug-0:3.6.8-41.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf

    Use the console (no argument needed) or HTML file (-w argument) output to generate docs rather than the HTTP server options. Put differently, do not use the -p or -n options of pydoc.

  • Workaroundplatform-python-debug-0:3.6.8-41.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf

    Use the console (no argument needed) or HTML file (-w argument) output to generate docs rather than the HTTP server options. Put differently, do not use the -p or -n options of pydoc.

  • Workaroundplatform-python-devel-0:3.6.8-41.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf

    Use the console (no argument needed) or HTML file (-w argument) output to generate docs rather than the HTTP server options. Put differently, do not use the -p or -n options of pydoc.

  • Workaroundplatform-python-devel-0:3.6.8-41.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf

    Use the console (no argument needed) or HTML file (-w argument) output to generate docs rather than the HTTP server options. Put differently, do not use the -p or -n options of pydoc.

  • Workaroundplatform-python-devel-0:3.6.8-41.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf

    Use the console (no argument needed) or HTML file (-w argument) output to generate docs rather than the HTTP server options. Put differently, do not use the -p or -n options of pydoc.

  • Workaroundplatform-python-devel-0:3.6.8-41.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf

    Use the console (no argument needed) or HTML file (-w argument) output to generate docs rather than the HTTP server options. Put differently, do not use the -p or -n options of pydoc.

  • Workaroundplatform-python-devel-0:3.6.8-41.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf

    Use the console (no argument needed) or HTML file (-w argument) output to generate docs rather than the HTTP server options. Put differently, do not use the -p or -n options of pydoc.

  • Workaroundpython3-0:3.6.8-41.el8.src as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf

    Use the console (no argument needed) or HTML file (-w argument) output to generate docs rather than the HTTP server options. Put differently, do not use the -p or -n options of pydoc.

  • Workaroundpython3-debuginfo-0:3.6.8-41.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf

    Use the console (no argument needed) or HTML file (-w argument) output to generate docs rather than the HTTP server options. Put differently, do not use the -p or -n options of pydoc.

  • Workaroundpython3-debuginfo-0:3.6.8-41.el8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf

    Use the console (no argument needed) or HTML file (-w argument) output to generate docs rather than the HTTP server options. Put differently, do not use the -p or -n options of pydoc.

  • Workaroundpython3-debuginfo-0:3.6.8-41.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf

    Use the console (no argument needed) or HTML file (-w argument) output to generate docs rather than the HTTP server options. Put differently, do not use the -p or -n options of pydoc.

  • Workaroundpython3-debuginfo-0:3.6.8-41.el8.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf

    Use the console (no argument needed) or HTML file (-w argument) output to generate docs rather than the HTTP server options. Put differently, do not use the -p or -n options of pydoc.

  • Workaroundpython3-debuginfo-0:3.6.8-41.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf

    Use the console (no argument needed) or HTML file (-w argument) output to generate docs rather than the HTTP server options. Put differently, do not use the -p or -n options of pydoc.

  • Workaroundpython3-debuginfo-0:3.6.8-41.el8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf

    Use the console (no argument needed) or HTML file (-w argument) output to generate docs rather than the HTTP server options. Put differently, do not use the -p or -n options of pydoc.

  • Workaroundpython3-debuginfo-0:3.6.8-41.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf

    Use the console (no argument needed) or HTML file (-w argument) output to generate docs rather than the HTTP server options. Put differently, do not use the -p or -n options of pydoc.

  • Workaroundpython3-debuginfo-0:3.6.8-41.el8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf

    Use the console (no argument needed) or HTML file (-w argument) output to generate docs rather than the HTTP server options. Put differently, do not use the -p or -n options of pydoc.

  • Workaroundpython3-debuginfo-0:3.6.8-41.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf

    Use the console (no argument needed) or HTML file (-w argument) output to generate docs rather than the HTTP server options. Put differently, do not use the -p or -n options of pydoc.

  • Workaroundpython3-debuginfo-0:3.6.8-41.el8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf

    Use the console (no argument needed) or HTML file (-w argument) output to generate docs rather than the HTTP server options. Put differently, do not use the -p or -n options of pydoc.

  • Workaroundpython3-debugsource-0:3.6.8-41.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf

    Use the console (no argument needed) or HTML file (-w argument) output to generate docs rather than the HTTP server options. Put differently, do not use the -p or -n options of pydoc.

  • Workaroundpython3-debugsource-0:3.6.8-41.el8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf

    Use the console (no argument needed) or HTML file (-w argument) output to generate docs rather than the HTTP server options. Put differently, do not use the -p or -n options of pydoc.

  • Workaroundpython3-debugsource-0:3.6.8-41.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf

    Use the console (no argument needed) or HTML file (-w argument) output to generate docs rather than the HTTP server options. Put differently, do not use the -p or -n options of pydoc.

  • Workaroundpython3-debugsource-0:3.6.8-41.el8.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf

    Use the console (no argument needed) or HTML file (-w argument) output to generate docs rather than the HTTP server options. Put differently, do not use the -p or -n options of pydoc.

  • Workaroundpython3-debugsource-0:3.6.8-41.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf

    Use the console (no argument needed) or HTML file (-w argument) output to generate docs rather than the HTTP server options. Put differently, do not use the -p or -n options of pydoc.

  • Workaroundpython3-debugsource-0:3.6.8-41.el8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf

    Use the console (no argument needed) or HTML file (-w argument) output to generate docs rather than the HTTP server options. Put differently, do not use the -p or -n options of pydoc.

  • Workaroundpython3-debugsource-0:3.6.8-41.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf

    Use the console (no argument needed) or HTML file (-w argument) output to generate docs rather than the HTTP server options. Put differently, do not use the -p or -n options of pydoc.

  • Workaroundpython3-debugsource-0:3.6.8-41.el8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf

    Use the console (no argument needed) or HTML file (-w argument) output to generate docs rather than the HTTP server options. Put differently, do not use the -p or -n options of pydoc.

  • Workaroundpython3-debugsource-0:3.6.8-41.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf

    Use the console (no argument needed) or HTML file (-w argument) output to generate docs rather than the HTTP server options. Put differently, do not use the -p or -n options of pydoc.

  • Workaroundpython3-debugsource-0:3.6.8-41.el8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf

    Use the console (no argument needed) or HTML file (-w argument) output to generate docs rather than the HTTP server options. Put differently, do not use the -p or -n options of pydoc.

  • Workaroundpython3-idle-0:3.6.8-41.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf

    Use the console (no argument needed) or HTML file (-w argument) output to generate docs rather than the HTTP server options. Put differently, do not use the -p or -n options of pydoc.

  • Workaroundpython3-idle-0:3.6.8-41.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf

    Use the console (no argument needed) or HTML file (-w argument) output to generate docs rather than the HTTP server options. Put differently, do not use the -p or -n options of pydoc.

  • Workaroundpython3-idle-0:3.6.8-41.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf

    Use the console (no argument needed) or HTML file (-w argument) output to generate docs rather than the HTTP server options. Put differently, do not use the -p or -n options of pydoc.

  • Workaroundpython3-idle-0:3.6.8-41.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf

    Use the console (no argument needed) or HTML file (-w argument) output to generate docs rather than the HTTP server options. Put differently, do not use the -p or -n options of pydoc.

  • Workaroundpython3-idle-0:3.6.8-41.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf

    Use the console (no argument needed) or HTML file (-w argument) output to generate docs rather than the HTTP server options. Put differently, do not use the -p or -n options of pydoc.

  • Workaroundpython3-libs-0:3.6.8-41.el8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf

    Use the console (no argument needed) or HTML file (-w argument) output to generate docs rather than the HTTP server options. Put differently, do not use the -p or -n options of pydoc.

  • Workaroundpython3-libs-0:3.6.8-41.el8.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf

    Use the console (no argument needed) or HTML file (-w argument) output to generate docs rather than the HTTP server options. Put differently, do not use the -p or -n options of pydoc.

  • Workaroundpython3-libs-0:3.6.8-41.el8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf

    Use the console (no argument needed) or HTML file (-w argument) output to generate docs rather than the HTTP server options. Put differently, do not use the -p or -n options of pydoc.

  • Workaroundpython3-libs-0:3.6.8-41.el8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf

    Use the console (no argument needed) or HTML file (-w argument) output to generate docs rather than the HTTP server options. Put differently, do not use the -p or -n options of pydoc.

  • Workaroundpython3-libs-0:3.6.8-41.el8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf

    Use the console (no argument needed) or HTML file (-w argument) output to generate docs rather than the HTTP server options. Put differently, do not use the -p or -n options of pydoc.

  • Workaroundpython3-test-0:3.6.8-41.el8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf

    Use the console (no argument needed) or HTML file (-w argument) output to generate docs rather than the HTTP server options. Put differently, do not use the -p or -n options of pydoc.

  • Workaroundpython3-test-0:3.6.8-41.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf

    Use the console (no argument needed) or HTML file (-w argument) output to generate docs rather than the HTTP server options. Put differently, do not use the -p or -n options of pydoc.

  • Workaroundpython3-test-0:3.6.8-41.el8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf

    Use the console (no argument needed) or HTML file (-w argument) output to generate docs rather than the HTTP server options. Put differently, do not use the -p or -n options of pydoc.

  • Workaroundpython3-test-0:3.6.8-41.el8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf

    Use the console (no argument needed) or HTML file (-w argument) output to generate docs rather than the HTTP server options. Put differently, do not use the -p or -n options of pydoc.

  • Workaroundpython3-test-0:3.6.8-41.el8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf

    Use the console (no argument needed) or HTML file (-w argument) output to generate docs rather than the HTTP server options. Put differently, do not use the -p or -n options of pydoc.

  • Workaroundpython3-tkinter-0:3.6.8-41.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf

    Use the console (no argument needed) or HTML file (-w argument) output to generate docs rather than the HTTP server options. Put differently, do not use the -p or -n options of pydoc.

  • Workaroundpython3-tkinter-0:3.6.8-41.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf

    Use the console (no argument needed) or HTML file (-w argument) output to generate docs rather than the HTTP server options. Put differently, do not use the -p or -n options of pydoc.

  • Workaroundpython3-tkinter-0:3.6.8-41.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf

    Use the console (no argument needed) or HTML file (-w argument) output to generate docs rather than the HTTP server options. Put differently, do not use the -p or -n options of pydoc.

  • Workaroundpython3-tkinter-0:3.6.8-41.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf

    Use the console (no argument needed) or HTML file (-w argument) output to generate docs rather than the HTTP server options. Put differently, do not use the -p or -n options of pydoc.

  • Workaroundpython3-tkinter-0:3.6.8-41.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)redhat_csaf

    Use the console (no argument needed) or HTML file (-w argument) output to generate docs rather than the HTTP server options. Put differently, do not use the -p or -n options of pydoc.

02

cvss

Technical severity, 0–10. One row per scoring source.

5.7
010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · low–medium · 2.7–5.7

v2.02.7lowAV:A/AC:L/Au:S/C:P/I:N/A:Nprimary · NVD / NIST USexploitability 5.1 · impact 2.9
v3.15.7mediumCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:Nprimary · NVD / NIST USexploitability 2.1 · impact 3.6
v3.15.7mediumCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:Csecondary · CISA US
v3.15.7mediumAV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:Nsecondary · FSTEC (BDU) RU
v3.15.7mediumCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:Nsecondary · ENISA EU
v3.15.7mediumCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:Nsecondaryexploitability 2.1 · impact 3.6
v3.15.7mediumCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:Csecondary · Siemens ProductCERT DE
v3.15.2mediumCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:Usecondary · CVSS-BT (t0sche)
v3.15.5mediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:Nsecondary · Red Hat Product Security US
03

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Trackcoordinatorcisa_ssvcUS
04

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-22USprimaryCWE-200USCWE-200USCWE-200USCWE-22USCWE-22US
05

affected products (136)

Products and version ranges known to be affected.

showing 20 of 136
06

advisories (8)

Vendor and ecosystem advisories describing this.

  • RHSA-2021:4399Red Hat Security Advisory: python3 security update2021-11-09csaf · redhat_csafUS

    An update for python3 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

  • SSA-398330SSA-398330: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP >= V3.1.0 and < V3.1.52023-12-12csaf · siemens_psirtDE

    Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the firmware version >= V3.1.0 and < V3.1.5 for the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP (incl. SIPLUS variant). These GNU/Linux vulnerabilities have been externally identified. Siemens has released new versions for the affected products and recommends to update to the latest versions. SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP >= V3.1.0 and < V3.1.5 are no longer maintained and there won't be any update to the CVE list anymore. Please update to the latest version. Note: This SSA advises vulnerabilities for firmware version V3.1 only; for versions < V3.1 refer to Siemens Security Bulletin SSB-439005 (https://cert-portal.siemens.com/productcert/html/ssb-439005.html).

  • WID-SEC-W-2023-1418Python: Schwachstelle ermöglicht Offenlegung von InformationenDeutsch2021-04-06csaf · cert_bundDE

    Ein benachbarter, authentisierter Angreifer kann eine Schwachstelle in Python ausnutzen, um Informationen offenzulegen.

  • ICSA-23-348-10Siemens SIMATIC S7-15002023-12-12icsa · cisa_csaf_otUS

    Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the firmware version >= V3.1.0 and < V3.1.5 for the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP (incl. SIPLUS variant). These GNU/Linux vulnerabilities have been externally identified. Siemens has released new versions for the affected products and recommends to update to the latest versions. Note: This SSA advises vulnerabilities for firmware version V3.1 only; for versions < V3.1 refer to Siemens Security Bulletin SSB-439005 ( https://cert-portal.siemens.com/productcert/html/ssb-439005.html).

  • BIT-libpython-2021-34262025-08-11vendor · osvUS

    There's a flaw in Python 3's pydoc. A local or adjacent attacker who discovers or is able to convince another local or adjacent user to start a pydoc server could access the server and use it to disclose sensitive information belonging to the other user that they would not normally be able to access. The highest risk of this flaw is to data confidentiality. This flaw affects Python versions before 3.8.9, Python versions before 3.9.3 and Python versions before 3.10.0.

  • BIT-python-2021-34262024-03-06vendor · osvUS

    There's a flaw in Python 3's pydoc. A local or adjacent attacker who discovers or is able to convince another local or adjacent user to start a pydoc server could access the server and use it to disclose sensitive information belonging to the other user that they would not normally be able to access. The highest risk of this flaw is to data confidentiality. This flaw affects Python versions before 3.8.9, Python versions before 3.9.3 and Python versions before 3.10.0.

  • BIT-python-min-2021-34262025-01-16vendor · osvUS

    There's a flaw in Python 3's pydoc. A local or adjacent attacker who discovers or is able to convince another local or adjacent user to start a pydoc server could access the server and use it to disclose sensitive information belonging to the other user that they would not normally be able to access. The highest risk of this flaw is to data confidentiality. This flaw affects Python versions before 3.8.9, Python versions before 3.9.3 and Python versions before 3.10.0.

  • PSF-2021-4Information disclosure via pydoc getfile2021-05-20vendor · osvUS

    There's a flaw in Python 3's pydoc. A local or adjacent attacker who discovers or is able to convince another local or adjacent user to start a pydoc server could access the server and use it to disclose sensitive information belonging to the other user that they would not normally be able to access. The highest risk of this flaw is to data confidentiality. This flaw affects Python versions before 3.8.9, Python versions before 3.9.3 and Python versions before 3.10.0a7.

07

also known as (8)

Other names and identifiers for this entity.

08

sources

Which sources assert this record, and when.

cnnvdenisa_euvdfstec_bduosvcert_bundcisa_csaf_otredhat_csafsiemens_psirtNVDCVE.orgMITRE
published 2021-05-20modified 2026-06-17
10

references (76)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan