Lucene search

K
kasperskyKaspersky LabKLA10301
HistoryMay 19, 2014 - 12:00 a.m.

KLA10301 DoS vulnerability in Python

2014-05-1900:00:00
Kaspersky Lab
threats.kaspersky.com
20

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.003 Low

EPSS

Percentile

67.4%

Detect date:

05/19/2014

Severity:

Warning

Description:

An incorrect hash realization was found in Python. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via a specially designed input.

Affected products:

Python 2.7 versions from 2.7.0 to 2.7.7
Python 3.0 versions from 3.0.0 to 3.0.1
Python 3.1 versions from 3.1.0 to 3.1.5
Python 3.2 versions from 3.2.0 to 3.2.5
Python 3.3 versions from 3.3.0 to 3.3.5

Solution:

Update to the latest version

Impacts:

DoS

Related products:

Python

CVE-IDS:

CVE-2013-70404.3Warning

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.003 Low

EPSS

Percentile

67.4%