PT-2008-3807 · Python+1 · Python+1

David Remahl · Published 2008-08-01 · Updated 2024-06-15 · CVE-2008-2316

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Python versions prior to 2.5.2

Description: The issue is related to an integer overflow in the hashlib module, specifically in the hashopenssl.c file. This could potentially allow attackers to defeat cryptographic digests in certain contexts, particularly when dealing with data that exceeds 4GB.

Recommendations: For versions prior to 2.5.2, update to a version that includes the fix for the integer overflow in the hashlib module to prevent potential exploitation.

Exploit

Fix

Weakness Enumeration

CWE-189

Related Identifiers

CVE-2008-2316

DSA-1977-1

DTSA-157-1

OPENSUSE-SU-2024:11202-1

PSF-2008-5

SUSE-SU-2020:0234-1

Affected Products

Python

Suse

References · 162

• 🔥 http://bugs.gentoo.org/attachment.cgi?id=159422&action=view · Exploit
• http://ubuntu.com/usn/usn-632-1 · Vendor Advisory
• http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.525289 · Vendor Advisory
• http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200807-16.xml · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2008:163 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:11202-1 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html · Vendor Advisory
• https://osv.dev/vulnerability/PSF-2008-5 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2020:0234-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-2316 · Security Note
• http://secunia.com/advisories/31358 · Note
• https://bugzilla.suse.com/707667 · Note
• https://bugzilla.suse.com/1073269 · Note
• https://bugzilla.suse.com/637176 · Note