Python before 3.3.4 RC1 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a file size value larger than the size of the zip file to the (1) ZipExtFile.read, (2) ZipExtFile.read(n), (3) ZipExtFile.readlines, (4) ZipFile.extract, or (5) ZipFile.extractall function.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Apache | — | Apply OS X security update 2015-006Upgrade macOS to the latest version | Aug 28, 2015 | Apr 22, 2014 |
| Apple Osx Python | — | Upgrade macOS to the latest version | Mar 29, 2016 | Apr 22, 2014 |
| Gentoo Linux | — | Upgrade dev-lang/python. | Oct 30, 2017 | Apr 22, 2014 |
| Suse | — | Upgrade python3-baseUpgrade python3-idleUpgrade libpython3_3m1_0-32bitUpgrade python3-develUpgrade python3-dbmUpgrade python3-testsuiteUpgrade python3-docUpgrade python3-cursesUpgrade python3-tkUpgrade python3-toolsUpgrade python3-32bitUpgrade python3-doc-pdfUpgrade libpython3_3m1_0Upgrade python3Upgrade python3-base-32bit | May 29, 2014 | Apr 22, 2014 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub