3 matches found
Python pickle integer overflow DoS
The vulnerability in the pickle.c module of the Python programming language is related to a numerical overflow due to the large value of LONGBINPUT. This value is incorrectly handled when attempting to double the size of an object. Exploiting this vulnerability can allow a remote attacker to caus...
UBUNTU-CVE-2018-20406
Modules/pickle.c in Python before 3.7.1 has an integer overflow via a large LONGBINPUT value that is mishandled during a "resize to twice the size" attempt. This issue might cause memory exhaustion, but is only relevant if the pickle format is used for serializing tens or hundreds of gigabytes of...
PT-2018-3715
Name of the Vulnerable Software and Affected Versions Python versions prior to 3.7.1 Description The issue is related to an integer overflow via a large LONG BINPUT value that is mishandled during a "resize to twice the size" attempt in the pickle.c module. This might cause memory exhaustion, but...