4 matches found
Session fixation
Python before 3.3.4 RC1 allows remote attackers to cause a denial of service infinite loop and CPU consumption via a file size value larger than the size of the zip file to the 1 ZipExtFile.read, 2 ZipExtFile.readn, 3 ZipExtFile.readlines, 4 ZipFile.extract, or 5 ZipFile.extractall function...
CVE-2013-7338
Python before 3.3.4 RC1 allows remote attackers to cause a denial of service infinite loop and CPU consumption via a file size value larger than the size of the zip file to the 1 ZipExtFile.read, 2 ZipExtFile.readn, 3 ZipExtFile.readlines, 4 ZipFile.extract, or 5 ZipFile.extractall function...
Updated python3 package fixes security vulnerabilities
ZipExtFile.read goes into 100% CPU infinite loop on maliciously binary edited zips CVE-2013-7338...
MGASA-2014-0140 Updated python3 package fixes security vulnerabilities
ZipExtFile.read goes into 100% CPU infinite loop on maliciously binary edited zips CVE-2013-7338...