CVE:CVE-2018-1000802
CNNVD:CNNVD-201809-847
Python是Python基金会的一套开源的、面向对象的程序设计语言。该语言具有可扩展、支持模块和包、支持多种平台等特点。
Python（CPython） 2.7版本中的shutil模块（make_archive函数）存在命令注入漏洞。攻击者可通过输入消息利用该漏洞造成拒绝服务或获取信息。
solution:Upgrade python python to a higher version than 2.7.16,and avoid the version [2.7.0,2.7.16); Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,16.04,18.04,and avoid the version 12.04,14.04,16.04,18.04; Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0; Upgrade opensuse leap to a higher version than 15.1,and avoid the version 15.1