CVE-2008-2315 Multiple integer overflows in Python 2.5.2 and earlier allow context-dependent attackers to have an unknown impact via vectors related to the (1) stringobject, (2) unicodeobject, (3) bufferobject, (4)...
HighCVSS 7.5
EPSS 4.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple integer overflows in Python 2.5.2 and earlier allow context-dependent attackers to have an unknown impact via vectors related to the (1) stringobject, (2) unicodeobject, (3) bufferobject, (4) longobject, (5) tupleobject, (6) stropmodule, (7) gcmodule, and (8) mmapmodule modules. NOTE: The expandtabs integer overflows in stringobject and unicodeobject in 2.5.2 are covered by CVE-2008-5031.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| python | <= 2.5.2 | No fix listed |
References
- bugs.gentoo.org exploit
- bugs.gentoo.org third-party-advisory
- APPLE-SA-2009-02-12 mailing-list vendor-advisory
- SUSE-SR:2008:017 third-party-advisory vendor-advisory
- 31305 broken-link third-party-advisory
- 31332 broken-link third-party-advisory
- 31358 broken-link third-party-advisory
- 31365 broken-link third-party-advisory
- 31518 broken-link third-party-advisory
- 31687 broken-link third-party-advisory
- 32793 broken-link third-party-advisory
- 33937 broken-link third-party-advisory
- 37471 broken-link third-party-advisory
- 38675 broken-link third-party-advisory
- GLSA-200807-16 third-party-advisory vendor-advisory
- SSA:2008-217-01 third-party-advisory vendor-advisory
- support.apple.com third-party-advisory
- support.avaya.com third-party-advisory
- DSA-1667 third-party-advisory vendor-advisory
- MDVSA-2008:163 broken-link third-party-advisory vendor-advisory
- MDVSA-2008:164 broken-link third-party-advisory vendor-advisory
- www.novell.com third-party-advisory
- [oss-security] 20081105 CVE Request - Python string expandtabs mailing-list
- [oss-security] 20081105 Re: CVE Request - Python string expandtabs mailing-list
- 20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components mailing-list third-party-advisory vdb-entry
- 30491 third-party-advisory vdb-entry
- USN-632-1 third-party-advisory vendor-advisory
- www.vmware.com third-party-advisory
- ADV-2008-2288 broken-link third-party-advisory vdb-entry
- ADV-2009-3316 broken-link third-party-advisory vdb-entry
- python-modules-bo(44172) vdb-entry
- python-multiple-bo(44173) vdb-entry
- oval:org.mitre.oval:def:8445 broken-link signature vdb-entry
- oval:org.mitre.oval:def:8683 broken-link signature vdb-entry
- oval:org.mitre.oval:def:9761 broken-link signature vdb-entry