Approved changes feed: RSS · Atom

cpe:2.3:a:python:python:3.5.1:*:*:*:*:*:*:*

part: a version: 3.5.1 update: *

VendorPython (b57ad93a-6195-5192-9423-6cfad6044a8b)
ProductPython (fc328eef-0a85-5ddb-b629-b8866ec518c8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/python purl2cpe 2026-06-01 10:16:29.388602
pkg:github/python/cpython purl2cpe 2026-06-01 10:16:29.388604
pkg:python/python purl2cpe 2026-06-01 10:16:29.388605
pkg:rpm/opensuse/python purl2cpe 2026-06-01 10:16:29.388606

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-5636 vulnerable 2026-06-03 14:35:55.497225 Details available
Integer overflow in the get_data function in zipimport.c in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 allows remote attackers to have unspecified impact via a negative data size value, which triggers a heap-based buffer overflow.
Published: 2016-09-02T14:00:00.000Z
Updated: 2024-08-06T01:07:59.238Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0772 vulnerable 2026-06-03 14:35:22.193718 Details available
The smtplib library in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 does not return an error when StartTLS fails, which might allow man-in-the-middle attackers to bypass the TLS protections by leveraging a network position between the client and the registry to block the StartTLS command, aka a "StartTLS stripping attack."
Published: 2016-09-02T14:00:00.000Z
Updated: 2024-08-05T22:30:04.119Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.