Lucene search
HistoryAug 14, 2012 - 10:55 p.m.
CVE-2012-2135
CVSS2
6.4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:N/A:P
AI Score
6.6
Confidence
Low
EPSS
0.033
Percentile
91.3%
The utf-16 decoder in Python 3.1 through 3.3 does not update the aligned_end variable after calling the unicode_decode_call_errorhandler function, which allows remote attackers to obtain sensitive information (process memory) or cause a denial of service (memory corruption and crash) via unspecified vectors.
Affected configurations
Node
pythonpythonRange2.7.0–2.7.4
ORpythonpythonRange3.2.0–3.2.4
ORpythonpythonRange3.3.0–3.3.3
Node
canonicalubuntu_linuxMatch10.04-
ORcanonicalubuntu_linuxMatch11.04
ORcanonicalubuntu_linuxMatch11.10
ORcanonicalubuntu_linuxMatch12.04-
ORcanonicalubuntu_linuxMatch12.10
Node
debiandebian_linuxMatch6.0
Related
cvelist
cvelist
CVE-2012-2135
2012-08-14 22:00:00
ubuntucve
ubuntucve
CVE-2012-2135
2012-08-14 00:00:00
openvas
openvas
Python < 2.7.4, 3.2.x < 3.2.4 Vulnerability in the utf-16 decoder after error handling (bpo-14579) - Linux
2021-11-01 00:00:00
Ubuntu: Security Advisory (USN-1615-1)
2012-10-26 00:00:00
Ubuntu Update for python3.2 USN-1615-1
2012-10-26 00:00:00
prion
prion
Memory corruption
2012-08-14 22:55:00
nessus
nessus
openSUSE Security Update : python3 (openSUSE-SU-2012:0861-1)
2014-06-13 00:00:00
Ubuntu 11.04 / 11.10 / 12.04 LTS / 12.10 : python3.2 vulnerabilities (USN-1615-1)
2012-10-24 00:00:00
Ubuntu 10.04 LTS / 11.04 : python3.1 vulnerabilities (USN-1616-1)
2012-10-25 00:00:00
cve
cve
CVE-2012-2135
2012-08-14 22:55:01
ubuntu
ubuntu
Python 3.2 vulnerabilities
2012-10-23 00:00:00
Python 3.1 vulnerabilities
2012-10-24 00:00:00
CVSS2
6.4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:N/A:P
AI Score
6.6
Confidence
Low
EPSS
0.033
Percentile
91.3%
Related for NVD:CVE-2012-2135