The gzip_decode function in the xmlrpc client library in Python 3.4 and earlier allows remote attackers to cause a denial of service (memory consumption) via a crafted HTTP request.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade python27 | Sep 19, 2018 | Jun 25, 2015 |
| Debian | — | Upgrade python2.7 | Jul 30, 2024 | Mar 11, 2020 |
| Oracle Solaris | — | Upgrade library/python/tkinter-27 to version 2.7.9-0.175.3.10.0.3.0 on Solaris 11.3Upgrade runtime/python-27 to version 2.7.9-0.175.3.10.0.3.0 on Solaris 11.3Upgrade runtime/python-27/tests to version 2.7.9-0.175.3.10.0.3.0 on Solaris 11.3Upgrade runtime/python-34 to version 3.4.3-0.175.3.10.0.3.0 on Solaris 11.3Upgrade library/python/tkinter-34 to version 3.4.3-0.175.3.10.0.3.0 on Solaris 11.3 | Jan 19, 2021 | Mar 11, 2020 |
| Oracle_linux | — | Upgrade python-toolsUpgrade python27-pythonUpgrade python27-runtimeUpgrade python27-python-toolsUpgrade python-debugUpgrade python27-scldevelUpgrade pythonUpgrade python-libsUpgrade python-testUpgrade python27-python-testUpgrade python27-python-setuptoolsUpgrade python-develUpgrade python27-python-simplejsonUpgrade python27-python-wheelUpgrade python27-python-debugUpgrade python27-python-libsUpgrade python27Upgrade python27-python-pipUpgrade tkinterUpgrade python27-tkinterUpgrade python27-python-devel | Oct 16, 2024 | Mar 11, 2020 |
| Suse | — | Upgrade python3-doc-pdfUpgrade python3-tkUpgrade python-tkUpgrade python3-testsuiteUpgrade python-xmlUpgrade python3-base-32bitUpgrade libpython3_3m1_0Upgrade python3-cursesUpgrade python-cursesUpgrade libpython2_7-1_0Upgrade python3Upgrade python3-32bitUpgrade python-develUpgrade python3-idleUpgrade python3-develUpgrade python-base-32bitUpgrade pythonUpgrade python-doc-pdfUpgrade python3-toolsUpgrade python-gdbmUpgrade libpython2_7-1_0-32bitUpgrade python-baseUpgrade python-idleUpgrade python-32bitUpgrade sle-we-releaseUpgrade python-docUpgrade python3-baseUpgrade python-demoUpgrade libpython3_3m1_0-32bitUpgrade python3-dbmUpgrade python3-doc | Mar 20, 2014 | Mar 20, 2014 |
| Ubuntu | — | Upgrade python3.4Upgrade python2.7-minimalUpgrade python2.7Upgrade python3.2Upgrade python3.2-minimalUpgrade python3.4-minimal | Nov 8, 2024 | Mar 11, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub