Multiple integer overflows in the PyOS_vsnprintf function in Python/mysnprintf.c in Python 2.5.2 and earlier allow context-dependent attackers to cause a denial of service (memory corruption) or have unspecified other impact via crafted input to string formatting operations. NOTE: the handling of certain integer values is also affected by related integer underflows and an off-by-one error.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Python | — | Apply OS X security update 2009-001 | Dec 16, 2011 | Aug 1, 2008 |
| Centos_linux | — | Upgrade tkinterUpgrade pythonUpgrade python-develUpgrade python-tools | Dec 1, 2016 | Aug 1, 2008 |
| Freebsd | — | Upgrade python24Upgrade python23Upgrade python25 | Dec 10, 2025 | Sep 10, 2008 |
| Gentoo Linux | — | Upgrade dev-lang/python. | Oct 30, 2017 | Aug 1, 2008 |
| Oracle_linux | — | Upgrade pythonUpgrade python-toolsUpgrade tkinterUpgrade python-devel | Oct 16, 2024 | Aug 1, 2008 |
| Suse | — | Upgrade libpython2_7-1_0Upgrade python-develUpgrade python-xmlUpgrade python-demoUpgrade python-tkUpgrade python-cursesUpgrade python-baseUpgrade python-32bitUpgrade python-idleUpgrade pythonUpgrade python-gdbmUpgrade python-x86 | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade python2.4Upgrade python2.5-minimalUpgrade python2.4-minimalUpgrade python2.5 | Nov 8, 2024 | Aug 1, 2008 |
| Vmsa 2009 0016 5 Updated Service Console Package Python | — | Upgrade VMware ESX 4.0 to build number 208167Upgrade VMware ESX 3.5 to build number 226117 | Sep 2, 2010 | Aug 1, 2008 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub