PT-2018-3715 · Python+4 · Python+4
Shuoz
·
Published
2018-12-23
·
Updated
2024-07-11
·
CVE-2018-20406
CVSS v3.1
7.5
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Python versions prior to 3.7.1
Description
The issue is related to an integer overflow via a large
LONG BINPUT value that is mishandled during a "resize to twice the size" attempt in the pickle.c module. This might cause memory exhaustion, but it is only relevant if the pickle format is used for serializing tens or hundreds of gigabytes of data. The issue can be exploited by a remote attacker to cause a denial of service.Recommendations
For versions prior to 3.7.1, update to version 3.7.1 or later to resolve the issue. As a temporary workaround, consider avoiding the use of the pickle format for serializing large amounts of data until a patch is applied. Restrict access to the
pickle.c module to minimize the risk of exploitation. Avoid using the LONG BINPUT value in the affected module until the issue is resolved.Exploit
Fix
Integer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Linuxmint
Python
Suse
Ubuntu