PT-2008-4562 · Python+2 · Python+2
Publicado
2008-08-01
·
Atualizado
2024-06-15
·
CVE-2008-3143
CVSS v2.0
7.5
Alta
| Vetor | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions:
Python versions prior to 2.5.2
Description:
The issue is related to multiple integer overflows in various Python modules and files, including
Include/pymem.h, csv.c, struct.c, arraymodule.c, audioop.c, binascii.c, cPickle.c, cStringIO.c, cjkcodecs/multibytecodec.c, datetimemodule.c, md5.c, rgbimgmodule.c, stropmodule.c, bufferobject.c, listobject.c, obmalloc.c, Parser/node.c, asdl.c, ast.c, bltinmodule.c, and compile.c. These overflows might allow context-dependent attackers to have an unknown impact. The issue has been addressed by adding checks for integer overflows, contributed by Google.Recommendations:
For Python versions prior to 2.5.2, update to version 2.5.2 or later to resolve the issue. As a temporary workaround, consider restricting the use of the affected modules until a patch is available.
Correção
Integer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Python
Red Hat
Suse