Multiple integer overflows in Python before 2.5.2 might allow context-dependent attackers to have an unknown impact via vectors related to (1) Include/pymem.h; (2) _csv.c, (3) _struct.c, (4) arraymodule.c, (5) audioop.c, (6) binascii.c, (7) cPickle.c, (8) cStringIO.c, (9) cjkcodecs/multibytecodec.c, (10) datetimemodule.c, (11) md5.c, (12) rgbimgmodule.c, and (13) stropmodule.c in Modules/; (14) bufferobject.c, (15) listobject.c, and (16) obmalloc.c in Objects/; (17) Parser/node.c; and (18) asdl.c, (19) ast.c, (20) bltinmodule.c, and (21) compile.c in Python/, as addressed by "checks for integer overflows, contributed by Google."
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade python-toolsUpgrade python-develUpgrade tkinterUpgrade python | Dec 1, 2016 | Aug 1, 2008 |
| Gentoo Linux | — | Upgrade dev-lang/python. | Oct 30, 2017 | Aug 1, 2008 |
| Oracle_linux | — | Upgrade python-develUpgrade pythonUpgrade python-toolsUpgrade tkinter | Oct 16, 2024 | Aug 1, 2008 |
| Suse | — | Upgrade python-demoUpgrade python-tkUpgrade python-x86Upgrade libpython2_7-1_0Upgrade python-baseUpgrade python-idleUpgrade pythonUpgrade python-cursesUpgrade python-develUpgrade python-gdbmUpgrade python-32bitUpgrade python-xml | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade python2.5Upgrade python2.4-minimalUpgrade python2.5-minimalUpgrade python2.4 | Nov 8, 2024 | Aug 1, 2008 |
| Vmsa 2009 0016 5 Updated Service Console Package Python | — | Upgrade VMware ESX 3.5 to build number 226117Upgrade VMware ESX 4.0 to build number 208167 | Sep 2, 2010 | Aug 1, 2008 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub