2 matches found
Python pickle integer overflow DoS
The vulnerability in the pickle.c module of the Python programming language is related to a numerical overflow due to the large value of LONGBINPUT. This value is incorrectly handled when attempting to double the size of an object. Exploiting this vulnerability can allow a remote attacker to caus...
7.5CVSS6.8AI score0.05789EPSS
SaveExploits1References9Affected Software3
UBUNTU-CVE-2018-20406
Modules/pickle.c in Python before 3.7.1 has an integer overflow via a large LONGBINPUT value that is mishandled during a "resize to twice the size" attempt. This issue might cause memory exhaustion, but is only relevant if the pickle format is used for serializing tens or hundreds of gigabytes of...
7.5CVSS6.8AI score0.05789EPSS
SaveExploits1References6
20