Lucene search

K
cve[email protected]CVE-2013-1752
HistoryJun 03, 2019 - 8:15 p.m.

CVE-2013-1752

2019-06-0320:15:00
web.nvd.nist.gov
114
cve-2013-1752
python
denial of service
memory consumption
httplib
ftplib
imaplib
nntplib
poplib
smtplib

7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.3%

Rejected reason: Various versions of Python do not properly restrict readline calls, which allows remote attackers to cause a denial of service (memory consumption) via a long string, related to (1) httplib - fixed in 2.7.4, 2.6.9, and 3.3.3; (2) ftplib - fixed in 2.7.6, 2.6.9, 3.3.3; (3) imaplib - not yet fixed in 2.7.x, fixed in 2.6.9, 3.3.3; (4) nntplib - fixed in 2.7.6, 2.6.9, 3.3.3; (5) poplib - not yet fixed in 2.7.x, fixed in 2.6.9, 3.3.3; and (6) smtplib - not yet fixed in 2.7.x, fixed in 2.6.9, not yet fixed in 3.3.x. NOTE: this was REJECTed because it is incompatible with CNT1 โ€œIndependently Fixableโ€ in the CVE Counting Decisions