PT-2018-3715 · Python+4 · Python+4
Shuoz
·
Publicado
2018-12-23
·
Atualizado
2024-07-11
·
CVE-2018-20406
CVSS v3.1
7.5
Alta
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Python versions prior to 3.7.1
Description
The issue is related to an integer overflow via a large
LONG BINPUT value that is mishandled during a "resize to twice the size" attempt in the pickle.c module. This might cause memory exhaustion, but it is only relevant if the pickle format is used for serializing tens or hundreds of gigabytes of data. The issue can be exploited by a remote attacker to cause a denial of service.Recommendations
For versions prior to 3.7.1, update to version 3.7.1 or later to resolve the issue. As a temporary workaround, consider avoiding the use of the pickle format for serializing large amounts of data until a patch is applied. Restrict access to the
pickle.c module to minimize the risk of exploitation. Avoid using the LONG BINPUT value in the affected module until the issue is resolved.Exploit
Correção
Integer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Linuxmint
Python
Suse
Ubuntu