CVE-2019-17514

Exploitation

Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.

SSVC decision

Not assessed by CISA

EPSS probability

4.67% probability of exploitation activity in the next 30 days.

EPSS percentile

Equal to or higher than the score of 91.4% of scored records. A rank, not a probability.

NVD base score

7.5 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

NVD analysis status

Modified. NVD last modified this record on 2026-06-17.

Red Hat severity

No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

Published

2019-10-12 12:07Z7 YR AGO

Last updated

2024-08-05 01:40Z2 YR AGO

Reserved

2019-10-12

Assigning CNA

mitre

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

• CWE-682Incorrect CalculationPillar

Data version

5.1

Document digest

8a7b1b5c49fdb1aae0168a11a66a85971e5719aa4cb50fc5fe984ca22e4a6e18

• web.archive.orghttps://web.archive.org/web/20150906020027/https://docs.python.org/2.7/library/glob.htmlx_refsource_MISC
• web.archive.orghttps://web.archive.org/web/20160526201356/https://docs.python.org/2.7/library/glob.htmlx_refsource_MISC
• web.archive.orghttps://web.archive.org/web/20150822013622/https://docs.python.org/3/library/glob.htmlx_refsource_MISC
• web.archive.orghttps://web.archive.org/web/20160309211341/https://docs.python.org/3/library/glob.htmlx_refsource_MISC
• github.comhttps://github.com/bminor/bash/blob/ac50fbac377e32b98d2de396f016ea81e8ee9961/pathexp.c#L380x_refsource_MISC
• github.comhttps://github.com/bminor/bash/blob/ac50fbac377e32b98d2de396f016ea81e8ee9961/pathexp.c#L405x_refsource_MISC
• bugs.python.orghttps://bugs.python.org/issue33275x_refsource_MISC
• twitter.comhttps://twitter.com/LucasCMoore/status/1181615421922824192x_refsource_MISC
• pubs.acs.orghttps://pubs.acs.org/doi/suppl/10.1021/acs.orglett.9b03216/suppl_file/ol9b03216_si_002.zipx_refsource_MISC
• pubs.acs.orghttps://pubs.acs.org/doi/full/10.1021/acs.orglett.9b03216x_refsource_MISC
• www.vice.comhttps://www.vice.com/en_us/article/zmjwda/a-code-glitch-may-have-caused-errors-in-more-than-100-published-studiesx_refsource_MISC
• twitter.comhttps://twitter.com/chris_bloke/status/1181997278136958976x_refsource_MISC
• security.netapp.comhttps://security.netapp.com/advisory/ntap-20191107-0005/x_refsource_CONFIRM
• usn.ubuntu.comUSN-4428-1https://usn.ubuntu.com/4428-1/vendor-advisoryx_refsource_UBUNTU