Python before 2.6.8, 2.7.x before 2.7.3, 3.x before 3.1.5, and 3.2.x before 3.2.3 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Python | — | Upgrade macOS to the latest version | Apr 5, 2017 | Oct 5, 2012 |
| Centos_linux | — | Upgrade python-testUpgrade tkinterUpgrade pythonUpgrade python-libsUpgrade python-develUpgrade python-tools | Dec 1, 2016 | Oct 5, 2012 |
| Debian | — | Upgrade python2.7 | Jul 30, 2024 | Oct 5, 2012 |
| Gentoo Linux | — | Upgrade dev-lang/python. | Oct 30, 2017 | Oct 5, 2012 |
| Oracle Solaris | — | Upgrade entire to version 0.5.11-0.175.1.0.0.24.2 on Solaris 11.1 | May 29, 2017 | Oct 5, 2012 |
| Oracle_linux | — | Upgrade python-develUpgrade python-libsUpgrade python-testUpgrade tkinterUpgrade pythonUpgrade python-tools | Oct 16, 2024 | Oct 5, 2012 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 28, 2011 |
| Suse | — | Upgrade libpython2_6-1_0-32bitUpgrade python-gdbmUpgrade python-base-x86Upgrade libpython3_13-1_0Upgrade python-xmlUpgrade python3-cursesUpgrade python314-base-x86-64-v3Upgrade python313-base-x86-64-v3Upgrade python3-toolsUpgrade libpython2_6-1_0-x86Upgrade libpython3_4m1_0-32bitUpgrade python314-dbmUpgrade python314-doc-devhelpUpgrade python3Upgrade libpython2_7-1_0Upgrade libpython3_14-1_0Upgrade python313-idleUpgrade python314-toolsUpgrade python3-dbmUpgrade python314Upgrade python-base-32bitUpgrade python-tkUpgrade python3-testsuiteUpgrade libpython2_7-1_0-32bitUpgrade python-baseUpgrade python3-develUpgrade libpython2_6-1_0Upgrade pythonUpgrade libpython3_14-1_0-x86-64-v3Upgrade python36-baseUpgrade python314-idleUpgrade python314-tkUpgrade python314-docUpgrade python313Upgrade python313-develUpgrade libpython3_6m1_0Upgrade python314-x86-64-v3Upgrade python313-baseUpgrade python313-tkUpgrade python313-dbmUpgrade python314-develUpgrade python313-doc-devhelpUpgrade python3-baseUpgrade libpython3_6m1_0-32bitUpgrade python3-idleUpgrade python313-toolsUpgrade python314-baseUpgrade python3-tkUpgrade python3-32bitUpgrade python313-x86-64-v3Upgrade python-develUpgrade python36Upgrade libpython3_13-1_0-x86-64-v3Upgrade libpython3_4m1_0Upgrade python-cursesUpgrade python313-docUpgrade python3-base-32bitUpgrade python314-cursesUpgrade python313-curses | Dec 12, 2013 | Jul 8, 2013 |
| Ubuntu | — | Upgrade python3.1-minimalUpgrade python2.6Upgrade python2.7Upgrade python3.2Upgrade python3.1Upgrade python3.2-minimalUpgrade python2.6-minimalUpgrade python2.7-minimal | Nov 8, 2024 | Oct 5, 2012 |
| Vmsa 2012 0016 | — | Upgrade VMware ESX 4.1 to build number 874690 | Nov 22, 2012 | Oct 5, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub