CVE-2021-3737: python from 3.6.0 (inclusive), before 3.6.14 (exclusive), from 3.7.0 (inclusive), before 3.7.11 (exclusive), from…

Affected technology

python · from 3.6.0 (inclusive), before 3.6.14 (exclusive)
python

python · from 3.7.0 (inclusive), before 3.7.11 (exclusive)
python

python · from 3.8.0 (inclusive), before 3.8.11 (exclusive)
python

python · from 3.9.0 (inclusive), before 3.9.6 (exclusive)
python

codeready linux builder · 8.0
redhat

codeready linux builder for ibm z systems · 8.0
redhat

codeready linux builder for power little endian · 8.0
redhat

enterprise linux · 6.0
redhat

enterprise linux · 7.0
redhat

enterprise linux · 8.0
redhat

enterprise linux for ibm z systems · 8.0
redhat

enterprise linux for power little endian · 8.0
redhat

fedora · 33
fedoraproject

fedora · 34
fedoraproject

ubuntu linux · 14.04
canonical

ubuntu linux · 16.04
canonical

ubuntu linux · 18.04
canonical

ubuntu linux · 20.04
canonical

ubuntu linux · 21.04
canonical

hci · Version not applicable in the source CPE
netapp

management services for element software · Version not applicable in the source CPE
netapp

netapp xcp smb · Version not applicable in the source CPE
netapp

ontap select deploy administration utility · Version not applicable in the source CPE
netapp

xcp nfs · Version not applicable in the source CPE
netapp

communications cloud native core binding support function · 22.1.3
oracle

communications cloud native core network exposure function · 22.1.1
oracle

communications cloud native core policy · 22.2.0
oracle

python · Fixed in python v3.6.14, python v3.7.11, python v3.8.11, python v3.9.6, python v3.10.0b2
Vendor not specified by the source

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

Component: Not specified by the source

Attack conditions (NVD, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.