Rapid7 Vulnerability & Exploit Database

SUSE Linux Security Advisory: SUSE-SR:2009:001

Back to Search

SUSE Linux Security Advisory: SUSE-SR:2009:001

Severity
10
CVSS
(AV:N/AC:L/Au:N/C:C/I:C/A:C)
Published
11/10/2008
Created
07/25/2018
Added
12/12/2013
Modified
07/04/2017

Description

Multiple integer overflows in Python 2.2.3 through 2.5.1, and 2.6, allow context-dependent attackers to have an unknown impact via a large integer value in the tabsize argument to the expandtabs method, as implemented by (1) the string_expandtabs function in Objects/stringobject.c and (2) the unicode_expandtabs function in Objects/unicodeobject.c. NOTE: this vulnerability reportedly exists because of an incomplete fix for CVE-2008-2315.

Solution(s)

  • suse-upgrade-cifs-mount
  • suse-upgrade-courier-authlib
  • suse-upgrade-courier-authlib-devel
  • suse-upgrade-courier-authlib-ldap
  • suse-upgrade-courier-authlib-mysql
  • suse-upgrade-courier-authlib-pgsql
  • suse-upgrade-courier-authlib-pipe
  • suse-upgrade-courier-authlib-userdb
  • suse-upgrade-ethereal
  • suse-upgrade-ethereal-devel
  • suse-upgrade-git
  • suse-upgrade-git-arch
  • suse-upgrade-git-core
  • suse-upgrade-git-cvs
  • suse-upgrade-git-email
  • suse-upgrade-git-svn
  • suse-upgrade-gitk
  • suse-upgrade-imap
  • suse-upgrade-imap-devel
  • suse-upgrade-imap-lib
  • suse-upgrade-jhead
  • suse-upgrade-keyutils
  • suse-upgrade-ldapsmb
  • suse-upgrade-libmsrpc
  • suse-upgrade-libmsrpc-devel
  • suse-upgrade-libmysqlclient-devel
  • suse-upgrade-libmysqlclient15
  • suse-upgrade-libmysqlclient15-32bit
  • suse-upgrade-libmysqlclient15-64bit
  • suse-upgrade-libmysqlclient_r15
  • suse-upgrade-libmysqlclient_r15-32bit
  • suse-upgrade-libmysqlclient_r15-64bit
  • suse-upgrade-libnetapi-devel
  • suse-upgrade-libnetapi0
  • suse-upgrade-libsmbclient-devel
  • suse-upgrade-libsmbclient0
  • suse-upgrade-libsmbclient0-32bit
  • suse-upgrade-libsmbclient0-64bit
  • suse-upgrade-libsmbsharemodes
  • suse-upgrade-libsmbsharemodes-devel
  • suse-upgrade-libsmbsharemodes0
  • suse-upgrade-libtalloc-devel
  • suse-upgrade-libtalloc1
  • suse-upgrade-libtalloc1-32bit
  • suse-upgrade-libtalloc1-64bit
  • suse-upgrade-libtdb-devel
  • suse-upgrade-libtdb1
  • suse-upgrade-libtdb1-32bit
  • suse-upgrade-libtdb1-64bit
  • suse-upgrade-libwbclient-devel
  • suse-upgrade-libwbclient0
  • suse-upgrade-libwbclient0-32bit
  • suse-upgrade-libwbclient0-64bit
  • suse-upgrade-libxml2
  • suse-upgrade-libxml2-32bit
  • suse-upgrade-libxml2-64bit
  • suse-upgrade-libxml2-devel
  • suse-upgrade-libxml2-devel-32bit
  • suse-upgrade-libxml2-devel-64bit
  • suse-upgrade-libxml2-doc
  • suse-upgrade-libxml2-x86
  • suse-upgrade-mysql
  • suse-upgrade-mysql-bench
  • suse-upgrade-mysql-client
  • suse-upgrade-mysql-debug
  • suse-upgrade-mysql-devel
  • suse-upgrade-mysql-max
  • suse-upgrade-mysql-shared
  • suse-upgrade-mysql-shared-32bit
  • suse-upgrade-mysql-shared-64bit
  • suse-upgrade-mysql-shared-x86
  • suse-upgrade-mysql-tools
  • suse-upgrade-nfs-utils
  • suse-upgrade-python
  • suse-upgrade-python-32bit
  • suse-upgrade-python-64bit
  • suse-upgrade-python-curses
  • suse-upgrade-python-demo
  • suse-upgrade-python-devel
  • suse-upgrade-python-doc
  • suse-upgrade-python-doc-pdf
  • suse-upgrade-python-gdbm
  • suse-upgrade-python-idle
  • suse-upgrade-python-mpz
  • suse-upgrade-python-tk
  • suse-upgrade-python-x86
  • suse-upgrade-python-xml
  • suse-upgrade-rsyslog
  • suse-upgrade-samba
  • suse-upgrade-samba-32bit
  • suse-upgrade-samba-64bit
  • suse-upgrade-samba-client
  • suse-upgrade-samba-client-32bit
  • suse-upgrade-samba-client-64bit
  • suse-upgrade-samba-devel
  • suse-upgrade-samba-krb-printing
  • suse-upgrade-samba-python
  • suse-upgrade-samba-vscan
  • suse-upgrade-samba-winbind
  • suse-upgrade-samba-winbind-32bit
  • suse-upgrade-samba-winbind-64bit
  • suse-upgrade-suse-release
  • suse-upgrade-vinagre
  • suse-upgrade-wireshark
  • suse-upgrade-wireshark-devel

References

  • suse-upgrade-cifs-mount
  • suse-upgrade-courier-authlib
  • suse-upgrade-courier-authlib-devel
  • suse-upgrade-courier-authlib-ldap
  • suse-upgrade-courier-authlib-mysql
  • suse-upgrade-courier-authlib-pgsql
  • suse-upgrade-courier-authlib-pipe
  • suse-upgrade-courier-authlib-userdb
  • suse-upgrade-ethereal
  • suse-upgrade-ethereal-devel
  • suse-upgrade-git
  • suse-upgrade-git-arch
  • suse-upgrade-git-core
  • suse-upgrade-git-cvs
  • suse-upgrade-git-email
  • suse-upgrade-git-svn
  • suse-upgrade-gitk
  • suse-upgrade-imap
  • suse-upgrade-imap-devel
  • suse-upgrade-imap-lib
  • suse-upgrade-jhead
  • suse-upgrade-keyutils
  • suse-upgrade-ldapsmb
  • suse-upgrade-libmsrpc
  • suse-upgrade-libmsrpc-devel
  • suse-upgrade-libmysqlclient-devel
  • suse-upgrade-libmysqlclient15
  • suse-upgrade-libmysqlclient15-32bit
  • suse-upgrade-libmysqlclient15-64bit
  • suse-upgrade-libmysqlclient_r15
  • suse-upgrade-libmysqlclient_r15-32bit
  • suse-upgrade-libmysqlclient_r15-64bit
  • suse-upgrade-libnetapi-devel
  • suse-upgrade-libnetapi0
  • suse-upgrade-libsmbclient-devel
  • suse-upgrade-libsmbclient0
  • suse-upgrade-libsmbclient0-32bit
  • suse-upgrade-libsmbclient0-64bit
  • suse-upgrade-libsmbsharemodes
  • suse-upgrade-libsmbsharemodes-devel
  • suse-upgrade-libsmbsharemodes0
  • suse-upgrade-libtalloc-devel
  • suse-upgrade-libtalloc1
  • suse-upgrade-libtalloc1-32bit
  • suse-upgrade-libtalloc1-64bit
  • suse-upgrade-libtdb-devel
  • suse-upgrade-libtdb1
  • suse-upgrade-libtdb1-32bit
  • suse-upgrade-libtdb1-64bit
  • suse-upgrade-libwbclient-devel
  • suse-upgrade-libwbclient0
  • suse-upgrade-libwbclient0-32bit
  • suse-upgrade-libwbclient0-64bit
  • suse-upgrade-libxml2
  • suse-upgrade-libxml2-32bit
  • suse-upgrade-libxml2-64bit
  • suse-upgrade-libxml2-devel
  • suse-upgrade-libxml2-devel-32bit
  • suse-upgrade-libxml2-devel-64bit
  • suse-upgrade-libxml2-doc
  • suse-upgrade-libxml2-x86
  • suse-upgrade-mysql
  • suse-upgrade-mysql-bench
  • suse-upgrade-mysql-client
  • suse-upgrade-mysql-debug
  • suse-upgrade-mysql-devel
  • suse-upgrade-mysql-max
  • suse-upgrade-mysql-shared
  • suse-upgrade-mysql-shared-32bit
  • suse-upgrade-mysql-shared-64bit
  • suse-upgrade-mysql-shared-x86
  • suse-upgrade-mysql-tools
  • suse-upgrade-nfs-utils
  • suse-upgrade-python
  • suse-upgrade-python-32bit
  • suse-upgrade-python-64bit
  • suse-upgrade-python-curses
  • suse-upgrade-python-demo
  • suse-upgrade-python-devel
  • suse-upgrade-python-doc
  • suse-upgrade-python-doc-pdf
  • suse-upgrade-python-gdbm
  • suse-upgrade-python-idle
  • suse-upgrade-python-mpz
  • suse-upgrade-python-tk
  • suse-upgrade-python-x86
  • suse-upgrade-python-xml
  • suse-upgrade-rsyslog
  • suse-upgrade-samba
  • suse-upgrade-samba-32bit
  • suse-upgrade-samba-64bit
  • suse-upgrade-samba-client
  • suse-upgrade-samba-client-32bit
  • suse-upgrade-samba-client-64bit
  • suse-upgrade-samba-devel
  • suse-upgrade-samba-krb-printing
  • suse-upgrade-samba-python
  • suse-upgrade-samba-vscan
  • suse-upgrade-samba-winbind
  • suse-upgrade-samba-winbind-32bit
  • suse-upgrade-samba-winbind-64bit
  • suse-upgrade-suse-release
  • suse-upgrade-vinagre
  • suse-upgrade-wireshark
  • suse-upgrade-wireshark-devel

With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.

– Scott Cheney, Manager of Information Security, Sierra View Medical Center

;