The gzip_decode function in the xmlrpc client library in Python 3.4 and earlier allows remote attackers to cause a denial of service (memory consumption) via a crafted HTTP request.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade python27 | Sep 19, 2018 | Jun 25, 2015 |
| Debian | — | Upgrade python2.7 | Jul 30, 2024 | Mar 11, 2020 |
| Oracle Solaris | — | Upgrade library/python/tkinter-27 to version 2.7.9-0.175.3.10.0.3.0 on Solaris 11.3Upgrade runtime/python-27/tests to version 2.7.9-0.175.3.10.0.3.0 on Solaris 11.3Upgrade runtime/python-27 to version 2.7.9-0.175.3.10.0.3.0 on Solaris 11.3Upgrade library/python/tkinter-34 to version 3.4.3-0.175.3.10.0.3.0 on Solaris 11.3Upgrade runtime/python-34 to version 3.4.3-0.175.3.10.0.3.0 on Solaris 11.3 | Jan 19, 2021 | Mar 11, 2020 |
| Oracle_linux | — | Upgrade tkinterUpgrade python27Upgrade python27-python-libsUpgrade python27-tkinterUpgrade python27-python-pipUpgrade python27-python-debugUpgrade python27-python-develUpgrade python-develUpgrade python27-python-simplejsonUpgrade python27-python-setuptoolsUpgrade python27-python-wheelUpgrade python27-python-testUpgrade python-testUpgrade python27-scldevelUpgrade python27-python-toolsUpgrade python-toolsUpgrade python27-runtimeUpgrade python-debugUpgrade pythonUpgrade python27-pythonUpgrade python-libs | Oct 16, 2024 | Mar 11, 2020 |
| Suse | — | Upgrade python3Upgrade python3-base-32bitUpgrade python3-doc-pdfUpgrade python3-cursesUpgrade python-tkUpgrade libpython2_7-1_0Upgrade python3-tkUpgrade python-cursesUpgrade libpython3_3m1_0Upgrade python3-testsuiteUpgrade python-develUpgrade python3-32bitUpgrade python-xmlUpgrade python-32bitUpgrade python3-develUpgrade python3-baseUpgrade python-demoUpgrade python3-toolsUpgrade python3-idleUpgrade python3-dbmUpgrade pythonUpgrade python-gdbmUpgrade python-base-32bitUpgrade libpython3_3m1_0-32bitUpgrade python3-docUpgrade libpython2_7-1_0-32bitUpgrade python-docUpgrade sle-we-releaseUpgrade python-idleUpgrade python-baseUpgrade python-doc-pdf | Mar 20, 2014 | Mar 20, 2014 |
| Ubuntu | — | Upgrade python3.4-minimalUpgrade python3.2-minimalUpgrade python3.2Upgrade python3.4Upgrade python2.7Upgrade python2.7-minimal | Nov 8, 2024 | Mar 11, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub