PT-2008-4563 · Python+2 · Python+2
Publicado
2008-08-01
·
Atualizado
2024-06-15
·
CVE-2008-3144
CVSS v2.0
5.0
Média
| Vetor | AV:N/AC:L/Au:N/C:N/I:N/A:P |
Name of the Vulnerable Software and Affected Versions:
Python versions prior to 2.5.2
Description:
The issue is related to multiple integer overflows in the PyOS vsnprintf function, which can be exploited by context-dependent attackers using crafted input to string formatting operations. This can lead to a denial of service due to memory corruption or have other unspecified impacts. The handling of certain integer values is also affected by related integer underflows and an off-by-one error.
Recommendations:
For versions prior to 2.5.2, update to a version that includes the fix for the integer overflows in the PyOS vsnprintf function. As a temporary workaround, consider restricting the use of string formatting operations with crafted input until a patch is available.
Exploit
Correção
DoS
Integer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Python
Red Hat
Suse