PT-2018-1947 · Python+7 · Python+7

Pedro Sampaio

·

Published

2018-09-10

·

Updated

2024-07-11

·

CVE-2018-14647

CVSS v3.1

7.5

High

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Python versions 3.7.0, 3.6.0 through 3.6.6, 3.5.0 through 3.5.6, 3.4.0 through 3.4.9, 2.7.0 through 2.7.15
Description The issue is related to Python's elementtree C accelerator failing to initialize Expat's hash salt during initialization. This could facilitate denial of service attacks against Expat by constructing an XML document that causes pathological hash collisions in Expat's internal data structures, consuming large amounts of CPU and RAM. The vulnerability can be exploited by an attacker using a specially crafted XML document to cause a denial of service.
Recommendations For Python versions 3.7.0, 3.6.0 through 3.6.6, 3.5.0 through 3.5.6, 3.4.0 through 3.4.9, 2.7.0 through 2.7.15, update to a version that includes the fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Improper Initialization

Improper Resource Release

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

ALT-PU-2019-1149
ALT-PU-2019-1565
BDU:2018-01554
CESA-2019_2030
CVE-2018-14647
DLA-1834-1
DLA-1835-1
DSA-4306-1
DSA-4307-1
MGASA-2018-0495
MGASA-2019-0135
OPENSUSE-SU-2019_0292-1
OPENSUSE-SU-2020:0086-1
OPENSUSE-SU-2020_0086-1
OPENSUSE-SU-2024:11202-1
OPENSUSE-SU-2024:11284-1
PSF-2018-5
RHSA-2019:1260
RHSA-2019:2030
RHSA-2019:3725
RHSA-2019_2030
RHSA-2020:1268
RHSA-2020:1346
RHSA-2020:1462
SUSE-SU-2018:3156-1
SUSE-SU-2018_3156-1
SUSE-SU-2019:0482-1
SUSE-SU-2019:0482-2
SUSE-SU-2019:2053-1
SUSE-SU-2019:2053-2
SUSE-SU-2019_0482-1
SUSE-SU-2019_0482-2
SUSE-SU-2020:0114-1
SUSE-SU-2020:0234-1
SUSE-SU-2020:2699-1
SUSE-SU-2020_2699-1
USN-3817-1
USN-3817-2
USN-6891-1

Affected Products

Alt Linux
Centos
Expat
Linuxmint
Python
Red Hat
Suse
Ubuntu