CVE-2020-1171

Updated: 2025-08-20 01:57:00.029695

Description:

A remote code execution vulnerability exists in Visual Studio Code when the Python extension loads configuration files after opening a project, aka 'Visual Studio Code Python Extension Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1192.


Links NIST CIRCL RHEL Ubuntu

Severity

Severity Score
CVSS Version 2.x HIGH 9.3
CVSS Version 3.x HIGH 8.8

Status

OS name Project name Version Score Severity Status Errata Last updated

Statement

Debian 13 python 3.9 8.8 HIGH Not Vulnerable 2025-12-03 11:47:35
Debian 13 python 3.6 8.8 HIGH Not Vulnerable 2025-09-29 23:27:16
Debian 13 python 2.7 8.8 HIGH Not Vulnerable 2025-10-14 14:44:24
Debian 13 python 3.8 8.8 HIGH Not Vulnerable 2025-11-14 16:30:14
Debian 13 python 3.7 8.8 HIGH Not Vulnerable 2025-11-14 16:30:15
EL 10 python 2.7 8.8 HIGH Not Vulnerable 2025-09-29 23:25:59
EL 10 python 3.6 8.8 HIGH Not Vulnerable 2025-10-23 12:33:56
EL 7 python 2.7 8.8 HIGH Not Vulnerable 2025-07-24 01:51:21
EL 7 python 3.6 8.8 HIGH Not Vulnerable 2025-07-24 01:51:22
EL 8 python 2.7 8.8 HIGH Not Vulnerable 2025-07-24 01:51:21
Total: 33