The gzip_decode function in the xmlrpc client library in Python 3.4 and earlier allows remote attackers to cause a denial of service (memory consumption) via a crafted HTTP request.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade python27 | Sep 19, 2018 | Jun 25, 2015 |
| Debian | — | Upgrade python2.7 | Jul 30, 2024 | Mar 11, 2020 |
| Oracle Solaris | — | Upgrade runtime/python-27/tests to version 2.7.9-0.175.3.10.0.3.0 on Solaris 11.3Upgrade runtime/python-27 to version 2.7.9-0.175.3.10.0.3.0 on Solaris 11.3Upgrade library/python/tkinter-27 to version 2.7.9-0.175.3.10.0.3.0 on Solaris 11.3Upgrade runtime/python-34 to version 3.4.3-0.175.3.10.0.3.0 on Solaris 11.3Upgrade library/python/tkinter-34 to version 3.4.3-0.175.3.10.0.3.0 on Solaris 11.3 | Jan 19, 2021 | Mar 11, 2020 |
| Oracle_linux | — | Upgrade tkinterUpgrade python27-python-testUpgrade python27-python-simplejsonUpgrade python27-python-debugUpgrade python-develUpgrade python27-tkinterUpgrade python27-python-develUpgrade python27-python-libsUpgrade python27-python-setuptoolsUpgrade python27Upgrade python27-python-wheelUpgrade python27-python-pipUpgrade python27-scldevelUpgrade python27-python-toolsUpgrade python-testUpgrade python-libsUpgrade python27-runtimeUpgrade pythonUpgrade python27-pythonUpgrade python-toolsUpgrade python-debug | Oct 16, 2024 | Mar 11, 2020 |
| Suse | — | Upgrade python-cursesUpgrade python3-cursesUpgrade python-develUpgrade python3Upgrade python-xmlUpgrade python3-testsuiteUpgrade python3-32bitUpgrade libpython2_7-1_0Upgrade python-tkUpgrade libpython3_3m1_0Upgrade python3-base-32bitUpgrade python3-doc-pdfUpgrade python3-tkUpgrade python-32bitUpgrade pythonUpgrade python-doc-pdfUpgrade python-base-32bitUpgrade python3-docUpgrade python3-dbmUpgrade libpython3_3m1_0-32bitUpgrade python-baseUpgrade libpython2_7-1_0-32bitUpgrade python-gdbmUpgrade python-docUpgrade sle-we-releaseUpgrade python3-idleUpgrade python-idleUpgrade python-demoUpgrade python3-baseUpgrade python3-toolsUpgrade python3-devel | Mar 20, 2014 | Mar 20, 2014 |
| Ubuntu | — | Upgrade python3.2Upgrade python3.4-minimalUpgrade python3.2-minimalUpgrade python3.4Upgrade python2.7-minimalUpgrade python2.7 | Nov 8, 2024 | Mar 11, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub