[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fvjTpXVTuM3KUFljXTSuuYiLcvvMzHsibzj1hpK1K-oQ":3,"g5a-risk:CVE-2019-20907":310},{"success":4,"data":5,"meta":308},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":26,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":98,"references":99,"referencesCount":195,"weaknesses":196,"weaknessesCount":205,"isActivelyExploited":206,"cisaInfo":26,"otxData":26,"relatedBlogPosts":207,"seoMetadata":208,"configurations":233,"relatedVendorCves":306,"notableEvents":307},"CVE-2019-20907","What is CVE-2019-20907?","In Lib\u002Ftarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to an infinite loop when opened by tarfile.open, because _proc_pax lacks header validation.","In Lib\u002Ftarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to an infinite loop when opened by tarfile.open, because _proc_...","2020-07-13T13:15:10.763","2023-11-07T03:09:14.267",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":29,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,3.9,3.6,[30],{"Source":17,"Type":18,"CVSSData":31,"BaseSeverity":36,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":32,"VectorString":33,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":34,"BaseScore":35,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:N\u002FI:N\u002FA:P","PARTIAL",5,"MEDIUM",10,2.9,0.02985,[39,39,39,39,39,39,39],"High",[43,47,52,55,60,65,68,73,76,79,82,85,89,93],{"vendor":44,"product":44,"version":45,"criteria":46,"vulnerable":4},"python","*","cpe:2.3:a:python:python:*:*:*:*:*:*:*:*",{"vendor":48,"product":49,"version":50,"criteria":51,"vulnerable":4},"opensuse","leap","15.1","cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*",{"vendor":48,"product":49,"version":53,"criteria":54,"vulnerable":4},"15.2","cpe:2.3:o:opensuse:leap:15.2:*:*:*:*:*:*:*",{"vendor":56,"product":57,"version":58,"criteria":59,"vulnerable":4},"debian","debian_linux","9.0","cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",{"vendor":61,"product":62,"version":63,"criteria":64,"vulnerable":4},"fedoraproject","fedora","31","cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*",{"vendor":61,"product":62,"version":66,"criteria":67,"vulnerable":4},"32","cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",{"vendor":69,"product":70,"version":71,"criteria":72,"vulnerable":4},"canonical","ubuntu_linux","12.04","cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*",{"vendor":69,"product":70,"version":74,"criteria":75,"vulnerable":4},"14.04","cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*",{"vendor":69,"product":70,"version":77,"criteria":78,"vulnerable":4},"16.04","cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",{"vendor":69,"product":70,"version":80,"criteria":81,"vulnerable":4},"18.04","cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",{"vendor":69,"product":70,"version":83,"criteria":84,"vulnerable":4},"20.04","cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:*",{"vendor":86,"product":87,"version":45,"criteria":88,"vulnerable":4},"netapp","active_iq_unified_manager","cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vsphere:*:*",{"vendor":86,"product":90,"version":91,"criteria":92,"vulnerable":4},"cloud_volumes_ontap_mediator","-","cpe:2.3:a:netapp:cloud_volumes_ontap_mediator:-:*:*:*:*:*:*:*",{"vendor":94,"product":95,"version":96,"criteria":97,"vulnerable":4},"oracle","zfs_storage_appliance_kit","8.8","cpe:2.3:a:oracle:zfs_storage_appliance_kit:8.8:*:*:*:*:*:*:*",14,[100,106,109,112,115,121,126,130,133,136,140,143,146,149,152,155,158,161,164,167,170,173,176,179,183,187,191],{"url":101,"source":102,"tags":103},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2020-08\u002Fmsg00051.html","Opensuse",[104,105],"Mailing List","Third Party Advisory",{"url":107,"source":102,"tags":108},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2020-08\u002Fmsg00052.html",[104,105],{"url":110,"source":102,"tags":111},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2020-08\u002Fmsg00053.html",[104,105],{"url":113,"source":102,"tags":114},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2020-08\u002Fmsg00056.html",[104,105],{"url":116,"source":117,"tags":118},"https:\u002F\u002Fbugs.python.org\u002Fissue39017","Python",[119,120],"Issue Tracking","Vendor Advisory",{"url":122,"source":123,"tags":124},"https:\u002F\u002Fgithub.com\u002Fpython\u002Fcpython\u002Fpull\u002F21454","GitHub",[125,105],"Patch",{"url":127,"source":128,"tags":129},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2020\u002F08\u002Fmsg00034.html","Debian",[104,105],{"url":131,"source":128,"tags":132},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2020\u002F11\u002Fmsg00032.html",[104,105],{"url":134,"source":128,"tags":135},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2023\u002F05\u002Fmsg00024.html",[],{"url":137,"source":138,"tags":139},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002F36XI3EEQNMHGOZEI63Y7UV6XZRELYEAU\u002F","Fedoraproject",[],{"url":141,"source":138,"tags":142},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FCAXHCY4V3LPAAJOBCJ26ISZ4NUXQXTUZ\u002F",[],{"url":144,"source":138,"tags":145},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FCNHPQGSP2YM3JAUD2VAMPXTIUQTZ2M2U\u002F",[],{"url":147,"source":138,"tags":148},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FCTUNTBJ3POHONQOTLEZC46POCIYYTAKZ\u002F",[],{"url":150,"source":138,"tags":151},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FLE4O3PNDNNOMSKHNUKZKD3NGHIFUFDPX\u002F",[],{"url":153,"source":138,"tags":154},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FNTBKKOLFFNHG6CM4ACDX4APHSD5ZX5N4\u002F",[],{"url":156,"source":138,"tags":157},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FOXI72HIHMXCQFWTULUXDG7VDA2BCYL4Y\u002F",[],{"url":159,"source":138,"tags":160},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FPDKKRXLNVXRF6VGERZSR3OMQR5D5QI6I\u002F",[],{"url":162,"source":138,"tags":163},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FTOGKLGTXZLHQQFBVCAPSUDA6DOOJFNRY\u002F",[],{"url":165,"source":138,"tags":166},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FV3TALOUBYU2MQD4BPLRTDQUMBKGCAXUA\u002F",[],{"url":168,"source":138,"tags":169},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FV53P2YOLEQH4J7S5QHXMKMZYFTVVMTMO\u002F",[],{"url":171,"source":138,"tags":172},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FVT4AF72TJ2XNIKCR4WEBR7URBJJ4YZRD\u002F",[],{"url":174,"source":138,"tags":175},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FYILCHHTNLH4GG4GSQBX2MZRKZBXOLCKE\u002F",[],{"url":177,"source":138,"tags":178},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FYSL3XWVDMSMKO23HR74AJQ6VEM3C2NTS\u002F",[],{"url":180,"source":181,"tags":182},"https:\u002F\u002Fsecurity.gentoo.org\u002Fglsa\u002F202008-01","Gentoo",[105],{"url":184,"source":185,"tags":186},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20200731-0002\u002F","Netapp",[105],{"url":188,"source":189,"tags":190},"https:\u002F\u002Fusn.ubuntu.com\u002F4428-1\u002F","Ubuntu",[105],{"url":192,"source":193,"tags":194},"https:\u002F\u002Fwww.oracle.com\u002Fsecurity-alerts\u002Fcpujan2021.html","Oracle",[125,105],27,[197],{"id":198,"name":199,"description":200,"extendedDescription":201,"status":202,"abstraction":203,"structure":204},"CWE-835","Loop with Unreachable Exit Condition ('Infinite Loop')","The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.","If the loop can be influenced by an attacker, this weakness could allow attackers to consume excessive resources such as CPU or memory.","Incomplete","Base","Simple",1,false,[],{"title":209,"metaDescription":210,"keywords":211,"canonicalUrl":212,"structuredData":213},"What is CVE-2019-20907? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2019-20907, a high severity cyber security vulnerability from 2020. In Lib\u002Ftarfile.py in Python through 3.8.3, an attacker is a...","CVE-2019-20907, CVE-2019-20907 vulnerability, CVE-2019-20907 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2020, CVSS score, exploit, patch, remediation, python security, opensuse security, debian security, fedoraproject security, canonical security, python vulnerability, leap vulnerability, debian_linux vulnerability","\u002Fwhat-is\u002Fcve-2019-20907",{"@context":214,"@type":215,"headline":209,"description":210,"datePublished":10,"dateModified":11,"author":216,"publisher":220,"about":224,"mainEntityOfPage":228,"articleSection":231,"keywords":232},"https:\u002F\u002Fschema.org","TechArticle",{"@type":217,"name":218,"url":219},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":217,"name":218,"url":219,"logo":221},{"@type":222,"url":223},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":225,"name":6,"description":226,"additionalType":227},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":229,"@id":230},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2019-20907","Cybersecurity","CVE-2019-20907, CVE-2019-20907 vulnerability, CVE-2019-20907 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[234,255,263,269,277,291,300],{"Operator":26,"Negate":26,"Nodes":235},[236],{"Operator":237,"Negate":26,"CPEMatch":238},"OR",[239,243,247,251],{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":240,"VersionStartExcluding":26,"VersionStartIncluding":241,"VersionEndExcluding":242,"VersionEndIncluding":26},"190C1D3B-648D-46B5-AB7E-8575DB03585B","3.5.0","3.5.10",{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":244,"VersionStartExcluding":26,"VersionStartIncluding":245,"VersionEndExcluding":246,"VersionEndIncluding":26},"7EB6A6FC-6C82-4543-8DAA-96FF2BACDB5C","3.6.0","3.6.12",{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":248,"VersionStartExcluding":26,"VersionStartIncluding":249,"VersionEndExcluding":250,"VersionEndIncluding":26},"045171F0-A76D-4385-B2AE-51479B425C45","3.7.0","3.7.9",{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":252,"VersionStartExcluding":26,"VersionStartIncluding":253,"VersionEndExcluding":254,"VersionEndIncluding":26},"9065C407-4FE5-4895-84FC-21B706581C0F","3.8.0","3.8.5",{"Operator":26,"Negate":26,"Nodes":256},[257],{"Operator":237,"Negate":26,"CPEMatch":258},[259,261],{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":260,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"B620311B-34A3-48A6-82DF-6F078D7A4493",{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":262,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"B009C22E-30A4-4288-BCF6-C3E81DEAF45A",{"Operator":26,"Negate":26,"Nodes":264},[265],{"Operator":237,"Negate":26,"CPEMatch":266},[267],{"Vulnerable":4,"Criteria":59,"MatchCriteriaID":268,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"DEECE5FC-CACF-4496-A3E7-164736409252",{"Operator":26,"Negate":26,"Nodes":270},[271],{"Operator":237,"Negate":26,"CPEMatch":272},[273,275],{"Vulnerable":4,"Criteria":64,"MatchCriteriaID":274,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"80F0FA5D-8D3B-4C0E-81E2-87998286AF33",{"Vulnerable":4,"Criteria":67,"MatchCriteriaID":276,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"36D96259-24BD-44E2-96D9-78CE1D41F956",{"Operator":26,"Negate":26,"Nodes":278},[279],{"Operator":237,"Negate":26,"CPEMatch":280},[281,283,285,287,289],{"Vulnerable":4,"Criteria":72,"MatchCriteriaID":282,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"8D305F7A-D159-4716-AB26-5E38BB5CD991",{"Vulnerable":4,"Criteria":75,"MatchCriteriaID":284,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"815D70A8-47D3-459C-A32C-9FEACA0659D1",{"Vulnerable":4,"Criteria":78,"MatchCriteriaID":286,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B",{"Vulnerable":4,"Criteria":81,"MatchCriteriaID":288,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D",{"Vulnerable":4,"Criteria":84,"MatchCriteriaID":290,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"902B8056-9E37-443B-8905-8AA93E2447FB",{"Operator":26,"Negate":26,"Nodes":292},[293],{"Operator":237,"Negate":26,"CPEMatch":294},[295,298],{"Vulnerable":4,"Criteria":88,"MatchCriteriaID":296,"VersionStartExcluding":26,"VersionStartIncluding":297,"VersionEndExcluding":26,"VersionEndIncluding":26},"B64FC591-5854-4480-A6E2-5E953C2415B3","9.5",{"Vulnerable":4,"Criteria":92,"MatchCriteriaID":299,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"280AA828-6FA9-4260-8EC1-019423B966E1",{"Operator":26,"Negate":26,"Nodes":301},[302],{"Operator":237,"Negate":26,"CPEMatch":303},[304],{"Vulnerable":4,"Criteria":97,"MatchCriteriaID":305,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"D3E503FB-6279-4D4A-91D8-E237ECF9D2B0",[],[],{"lastModified":11,"cacheTime":309,"version":32},1792361877770,{"score":311,"band":312,"action":313,"scoredAt":314},48,"Medium","Plan remediation","2026-10-16T06:48:59.114453+00:00"]