Lucene search

K
freebsdFreeBSD0DCCAA28-7F3C-11DD-8DE5-0030843D3802
HistoryAug 04, 2008 - 12:00 a.m.

python -- multiple vulnerabilities

2008-08-0400:00:00
vuxml.freebsd.org
16

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.011 Low

EPSS

Percentile

84.0%

Secunia reports:

Some vulnerabilities have been reported in Python, where some have
unknown impact and others can potentially be exploited by malicious
people to cause a DoS (Denial of Service) or to compromise a
vulnerable system.
Various integer overflow errors exist in core modules e.g.
stringobject, unicodeobject, bufferobject, longobject, tupleobject,
stropmodule, gcmodule, mmapmodule.
An integer overflow in the hashlib module can lead to an unreliable
cryptographic digest results.
Integer overflow errors in the processing of unicode strings can be
exploited to cause buffer overflows on 32-bit systems.
An integer overflow exists in the PyOS_vsnprintf() function on
architectures that do not have a “vsnprintf()” function.
An integer underflow error in the PyOS_vsnprintf() function when
passing zero-length strings can lead to memory corruption.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchpython24< 2.4.5_2UNKNOWN
FreeBSDanynoarchpython25< 2.5.2_3UNKNOWN

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.011 Low

EPSS

Percentile

84.0%