Approved changes feed: RSS · Atom

cpe:2.3:a:python:python:3.4.4:*:*:*:*:*:*:*

part: a version: 3.4.4 update: *

VendorPython (b57ad93a-6195-5192-9423-6cfad6044a8b)
ProductPython (fc328eef-0a85-5ddb-b629-b8866ec518c8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/python purl2cpe 2026-06-01 10:16:29.388415
pkg:github/python/cpython purl2cpe 2026-06-01 10:16:29.388417
pkg:python/python purl2cpe 2026-06-01 10:16:29.388418
pkg:rpm/opensuse/python purl2cpe 2026-06-01 10:16:29.388419

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-5636 vulnerable 2026-06-03 14:35:55.495881 Details available
Integer overflow in the get_data function in zipimport.c in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 allows remote attackers to have unspecified impact via a negative data size value, which triggers a heap-based buffer overflow.
Published: 2016-09-02T14:00:00.000Z
Updated: 2024-08-06T01:07:59.238Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0772 vulnerable 2026-06-03 14:35:22.207748 Details available
The smtplib library in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 does not return an error when StartTLS fails, which might allow man-in-the-middle attackers to bypass the TLS protections by leveraging a network position between the client and the registry to block the StartTLS command, aka a "StartTLS stripping attack."
Published: 2016-09-02T14:00:00.000Z
Updated: 2024-08-05T22:30:04.119Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.