CVE-2008-2316 Integer overflow in _hashopenssl.c in the hashlib module in Python 2.5.2 and earlier might allow context-dependent attackers to defeat cryptographic digests, related to "partial hashlib hashing of dat...
HighCVSS 7.5
EPSS 4.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integer overflow in _hashopenssl.c in the hashlib module in Python 2.5.2 and earlier might allow context-dependent attackers to defeat cryptographic digests, related to "partial hashlib hashing of data exceeding 4GB."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| python | <= 2.5.2 | No fix listed |
References
- bugs.gentoo.org exploit
- bugs.gentoo.org third-party-advisory
- APPLE-SA-2009-02-12 mailing-list vendor-advisory
- SUSE-SR:2008:017 third-party-advisory vendor-advisory
- 31305 broken-link third-party-advisory
- 31332 broken-link third-party-advisory
- 31358 broken-link third-party-advisory
- 31365 broken-link third-party-advisory
- 31473 broken-link third-party-advisory
- 31518 broken-link third-party-advisory
- 31687 broken-link third-party-advisory
- 33937 broken-link third-party-advisory
- GLSA-200807-16 third-party-advisory vendor-advisory
- SSA:2008-217-01 third-party-advisory vendor-advisory
- support.apple.com third-party-advisory
- wiki.rpath.com third-party-advisory
- MDVSA-2008:163 third-party-advisory vendor-advisory
- www.novell.com third-party-advisory
- 20080813 rPSA-2008-0243-1 idle python mailing-list third-party-advisory vdb-entry
- 30491 third-party-advisory vdb-entry
- USN-632-1 third-party-advisory vendor-advisory
- ADV-2008-2288 broken-link third-party-advisory vdb-entry
- python-multiple-bo(44173) vdb-entry
- python-hashlib-overflow(44174) vdb-entry