CVE:CVE-2019-16056
CNNVD:CNNVD-201909-251
Python是Python软件基金会的一套开源的、面向对象的程序设计语言。该语言具有可扩展、支持模块和包、支持多种平台等特点。
Python中存在安全漏洞，该漏洞源于邮件模块错误地处理了带有多个@字符的邮件地址。攻击者可利用该漏洞使应用程序接收到错误地址的邮件。以下产品及版本受到影响：Python 2.7.16及之前版本，3.x版本至3.5.7版本，3.6.x版本至3.6.9版本，3.7.x版本至3.7.4版本。
solution:Upgrade python python to a higher version than 2.7.16,3.0.1,3.1.5,3.2.6,3.3.7,3.4.10,3.5.7,3.6.9,3.7.4,and avoid the version (,2.7.16],[3.0.0,3.0.1],[3.1.0,3.1.5],[3.2.0,3.2.6],[3.3.0,3.3.7],[3.4.0,3.4.10],[3.5.0,3.5.7],[3.6.0,3.6.9],[3.7.0,3.7.4]; Upgrade fedoraproject fedora to a higher version than 29,30,31,and avoid the version 29,30,31; Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0; Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,16.04,18.04,19.04,and avoid the version 12.04,14.04,16.04,18.04,19.04; Upgrade redhat software_collections to a higher version than 1.0,and avoid the version 1.0; Upgrade oracle communications_operations_monitor to a higher version than 4.3,3.4,and avoid the version [4.1,4.3],3.4; Upgrade oracle peoplesoft_enterprise_peopletools to a higher version than 8.57,8.58,and avoid the version 8.57,8.58; Upgrade oracle zfs_storage_appliance_kit to a higher version than 8.8,and avoid the version 8.8; Upgrade oracle solaris to a higher version than 11,and avoid the version 11; Upgrade opensuse leap to a higher version than 15.0,15.1,and avoid the version 15.0,15.1