CVE:CVE-2018-1060
CNNVD:CNNVD-201806-912
Python是Python软件基金会的一套开源的、面向对象的程序设计语言。该语言具有可扩展、支持模块和包、支持多种平台等特点。
Python中的pop3lib的apop()方法存在资源管理错误漏洞。该漏洞源于网络系统或产品对系统资源（如内存、磁盘空间、文件等）的管理不当。以下版本受到影响：Python 2.7.15之前版本，3.4.9之前版本，3.5.6rc1之前版本，3.6.5rc1之前版本，3.7.0之前版本。
solution:Upgrade python python to a higher version than 2.7.15,3.4.9,3.5.6,3.6.5,and avoid the version [2.7.0,2.7.15),[3.0.0,3.4.9),[3.5.0,3.5.6),(3.6.0,3.6.5); Upgrade fedoraproject fedora to a higher version than 28,29,30,and avoid the version 28,29,30; Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,16.04,18.04,and avoid the version 12.04,14.04,16.04,18.04; Upgrade redhat ansible_tower to a higher version than 3.3,and avoid the version 3.3; Upgrade redhat enterprise_linux_desktop to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_workstation to a higher version than 7.0,and avoid the version 7.0; Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0