Multiple integer overflows in the PyOS_vsnprintf function in Python/mysnprintf.c in Python 2.5.2 and earlier allow context-dependent attackers to cause a denial of service (memory corruption) or have unspecified other impact via crafted input to string formatting operations. NOTE: the handling of certain integer values is also affected by related integer underflows and an off-by-one error.
CVSS Details
- CVSS 3.1 Base Score: 8.4
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Python | — | Apply OS X security update 2009-001 | Dec 16, 2011 | Aug 1, 2008 |
| Centos_linux | — | Upgrade python-develUpgrade pythonUpgrade python-toolsUpgrade tkinter | Dec 1, 2016 | Aug 1, 2008 |
| Freebsd | — | Upgrade python23Upgrade python24Upgrade python25 | Dec 10, 2025 | Sep 10, 2008 |
| Gentoo Linux | — | Upgrade dev-lang/python. | Oct 30, 2017 | Aug 1, 2008 |
| Oracle_linux | — | Upgrade python-develUpgrade tkinterUpgrade pythonUpgrade python-tools | Oct 16, 2024 | Aug 1, 2008 |
| Suse | — | Upgrade python-baseUpgrade python-gdbmUpgrade python-idleUpgrade python-x86Upgrade pythonUpgrade python-32bitUpgrade python-develUpgrade libpython2_7-1_0Upgrade python-demoUpgrade python-xmlUpgrade python-tkUpgrade python-curses | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade python2.5Upgrade python2.4-minimalUpgrade python2.5-minimalUpgrade python2.4 | Nov 8, 2024 | Aug 1, 2008 |
| Vmsa 2009 0016 5 Updated Service Console Package Python | — | Upgrade VMware ESX 4.0 to build number 208167Upgrade VMware ESX 3.5 to build number 226117 | Sep 2, 2010 | Aug 1, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub