Lucene search
RootSSV:61235HistoryDec 30, 2013 - 12:00 a.m.
Python多个安全漏洞
2013-12-3000:00:00
Root
www.seebug.org
56
0.002 Low
EPSS
Percentile
57.7%
CVE ID:CVE-2013-1752、CVE-2013-4238
Python是一款开放源代码的脚本编程语言。
Python存在多个安全漏洞，允许远程攻击者利用漏洞进行伪造攻击和进行拒绝服务攻击。
1，Python SSL模块没有正确处理服务器SSL证书中的"subjectAltNames"通用名的空字节，允许攻击者通过中间人攻击进行服务器伪造攻击，可获取敏感信息。
2，不受限的调用Lib/httplib.py中的"readline()"可导致消耗大量内存资源，造成拒绝服务攻击。
3，不受限的调用Lib/ftplib.py中的"readline()"可导致消耗大量内存资源，造成拒绝服务攻击。
4，不受限的调用Lib/imaplib.py中的"readline()"可导致消耗大量内存资源，造成拒绝服务攻击。
5，不受限的调用Lib/nntplib.py中的"readline()"可导致消耗大量内存资源，造成拒绝服务攻击。
6，不受限的调用Lib/poplib.py中的"readline()"可导致消耗大量内存资源，造成拒绝服务攻击。
7，不受限的调用Lib/smtplib.py中的"readline()"可导致消耗大量内存资源，造成拒绝服务攻击。
0
Python 2.6.x
厂商补丁：
Python
Python 2.6.9已经修复该漏洞，建议用户下载更新：
Related
nessus
nessus
LibreOffice < 4.1.5 / 4.2.0 Python Multiple Vulnerabilities (Mac OS X)
2014-04-04 00:00:00
LibreOffice < 4.1.5 / 4.2.0 Python Multiple Vulnerabilities
2014-04-04 00:00:00
SuSE 11.3 Security Update : python (SAT Patch Number 8892)
2014-03-07 00:00:00
openvas
openvas
Amazon Linux: Security Advisory (ALAS-2013-241)
2015-09-08 00:00:00
Fedora Update for jython FEDORA-2015-5938
2015-07-07 00:00:00
Amazon Linux: Security Advisory (ALAS-2015-552)
2015-09-08 00:00:00
amazon
amazon
Medium: python26
2013-11-03 12:09:00
Medium: python27
2013-09-04 13:31:00
Medium: python27
2015-06-22 10:31:00
fedora
fedora
[SECURITY] Fedora 21 Update: python-2.7.8-8.fc21
2015-04-18 09:43:06
[SECURITY] Fedora 22 Update: jnr-posix-3.0.9-3.fc22
2015-04-21 19:25:36
[SECURITY] Fedora 22 Update: jython-2.7-0.7.rc2.fc22
2015-04-21 19:25:36
prion
prion
Design/Logic Flaw
2019-06-03 20:15:00
Design/Logic Flaw
2013-08-18 02:52:00
Design/Logic Flaw
2013-08-27 03:34:00
f5
f5
K53192206 : Python and Jython vulnerability CVE-2013-1752
2017-07-21 00:00:00
SOL15638 - Python vulnerability CVE-2013-4238
2014-09-29 00:00:00
K15638 : Python vulnerability CVE-2013-4238
2014-10-17 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-01-15 09:06:08
Man-in-the-Middle (MitM)
2019-01-15 08:51:35
Improper Input Validation
2019-05-02 05:39:24
osv
osv
smtplib unlimited read
2019-06-03 19:04:24
python2.7 - security update
2014-03-17 00:00:00
python2.6 - regression update
2014-07-31 00:00:00
cve
cve
oraclelinux
oraclelinux
python security, bug fix, and enhancement update
2013-11-26 00:00:00
python security, bug fix, and enhancement update
2015-07-28 00:00:00
python security, bug fix, and enhancement update
2015-11-23 00:00:00
redhat
redhat
(RHSA-2013:1582) Moderate: python security, bug fix, and enhancement update
2013-11-21 00:00:00
(RHSA-2015:1330) Moderate: python security, bug fix, and enhancement update
2015-07-22 00:00:00
(RHSA-2015:2101) Moderate: python security, bug fix, and enhancement update
2015-11-19 13:41:01
ubuntu
ubuntu
Python 2.6 vulnerability
2013-10-01 00:00:00
Python 2.7 vulnerabilities
2013-10-01 00:00:00
Python 3.3 vulnerabilities
2013-10-01 00:00:00
securityvulns
securityvulns
Python SSL certificate check bypass
2013-10-02 00:00:00
centos
centos
python, tkinter security update
2013-11-26 13:32:42
python, tkinter security update
2015-07-26 14:11:19
python, tkinter security update
2015-11-30 19:48:49
mageia
mageia
Updated python package fixes security vulnerabilities
2014-03-24 11:37:41
Updated python & python3 packages fix multiple vulnerabilities
2014-02-20 01:24:08
Updated python3, bzr and some python packages fix security vulnerabilties
2013-08-22 21:58:14
ubuntucve
ubuntucve
CVE-2013-4238
2013-08-17 00:00:00
debian
debian
[SECURITY] [DSA 2880-1] python2.7 security update
2014-03-17 18:07:37
[DLA 25-1] python2.6 security update
2014-07-31 21:07:32
debiancve
debiancve
CVE-2013-4238
2013-08-18 02:52:00
vmware
vmware
VMware vSphere product updates address security vulnerabilities
2014-12-04 00:00:00
VMware vSphere product updates address security vulnerabilities
2014-12-04 00:00:00
slackware
slackware
[slackware-security] python
2019-03-03 22:46:15
archlinux
archlinux
python2: multiple issues
2014-12-15 00:00:00
ibm
ibm
gentoo
gentoo
Python: Multiple vulnerabilities
2015-03-18 00:00:00
suse
suse
Security update for python3 (important)
2020-01-21 00:00:00