SimpleXMLRPCServer.py in SimpleXMLRPCServer in Python before 2.6.8, 2.7.x before 2.7.3, 3.x before 3.1.5, and 3.2.x before 3.2.3 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via an XML-RPC POST request that contains a smaller amount of data than specified by the Content-Length header.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Python | — | Upgrade macOS to the latest version | Apr 5, 2017 | Oct 5, 2012 |
| Centos_linux | — | Upgrade python-develUpgrade pythonUpgrade python-toolsUpgrade python-libsUpgrade tkinterUpgrade python-test | Dec 1, 2016 | Oct 5, 2012 |
| Debian | — | Upgrade python2.7 | Jul 30, 2024 | Oct 5, 2012 |
| Freebsd | — | Upgrade python32Upgrade python24Upgrade python31Upgrade python27Upgrade python26Upgrade python25Upgrade pypy | Dec 10, 2025 | Feb 14, 2012 |
| Gentoo Linux | — | Upgrade dev-lang/python. | Oct 30, 2017 | Oct 5, 2012 |
| Oracle Solaris | — | Upgrade entire to version 0.5.11-0.175.1.0.0.24.2 on Solaris 11.1 | May 29, 2017 | Oct 5, 2012 |
| Oracle_linux | — | Upgrade python-develUpgrade python-testUpgrade python-libsUpgrade python-toolsUpgrade tkinterUpgrade python | Oct 16, 2024 | Oct 5, 2012 |
| Suse | — | Upgrade libpython3_6m1_0-32bitUpgrade python314-doc-devhelpUpgrade libpython3_6m1_0Upgrade python3-baseUpgrade libpython3_4m1_0-32bitUpgrade libpython3_13-1_0Upgrade python3-32bitUpgrade libpython2_7-1_0-32bitUpgrade python314Upgrade libpython2_6-1_0-x86Upgrade python-base-32bitUpgrade python-gdbmUpgrade pythonUpgrade python314-tkUpgrade libpython2_6-1_0Upgrade python3-idleUpgrade python3-dbmUpgrade python313-baseUpgrade python313-develUpgrade python313-doc-devhelpUpgrade python313-tkUpgrade python314-docUpgrade python313Upgrade python3-toolsUpgrade python-baseUpgrade python314-x86-64-v3Upgrade libpython3_4m1_0Upgrade python313-x86-64-v3Upgrade libpython2_6-1_0-32bitUpgrade python313-toolsUpgrade python3-develUpgrade python36Upgrade python3-testsuiteUpgrade python3Upgrade libpython3_14-1_0Upgrade python314-baseUpgrade python313-cursesUpgrade python314-dbmUpgrade python3-cursesUpgrade python-tkUpgrade python314-idleUpgrade libpython3_14-1_0-x86-64-v3Upgrade python314-base-x86-64-v3Upgrade libpython2_7-1_0Upgrade python313-base-x86-64-v3Upgrade python313-docUpgrade python313-dbmUpgrade python-base-x86Upgrade python3-tkUpgrade python313-idleUpgrade python314-toolsUpgrade python36-baseUpgrade python314-develUpgrade python-xmlUpgrade python314-cursesUpgrade python-develUpgrade python-cursesUpgrade libpython3_13-1_0-x86-64-v3Upgrade python3-base-32bit | Dec 12, 2013 | Jun 28, 2013 |
| Ubuntu | — | Upgrade python3.1-minimalUpgrade python2.5Upgrade python3.2Upgrade python2.4Upgrade python2.4-minimalUpgrade python2.5-minimalUpgrade python2.7-minimalUpgrade python3.2-minimalUpgrade python2.7Upgrade python2.6-minimalUpgrade python3.1Upgrade python2.6 | Nov 8, 2024 | Oct 5, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub