CVE-2008-3142 Multiple buffer overflows in Python 2.5.2 and earlier on 32bit platforms allow context-dependent attackers to cause a denial of service (crash) or have unspecified other impact via a long string that....
HighCVSS 7.5
EPSS 4.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple buffer overflows in Python 2.5.2 and earlier on 32bit platforms allow context-dependent attackers to cause a denial of service (crash) or have unspecified other impact via a long string that leads to incorrect memory allocation during Unicode string processing, related to the unicode_resize function and the PyMem_RESIZE macro.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| python | < 2.4.6 | 2.4.6 |
| python | >= 2.5.0, < 2.5.3 | 2.5.3 |
| Canonical Ubuntu Linux | = 6.06 | No fix listed |
| Canonical Ubuntu Linux | = 7.04 | No fix listed |
| Canonical Ubuntu Linux | = 7.10 | No fix listed |
| Canonical Ubuntu Linux | = 8.04 | No fix listed |
| debian linux | = 4.0 | No fix listed |
References
- bugs.gentoo.org issue-tracking third-party-advisory
- bugs.python.org exploit issue-tracking third-party-advisory
- bugs.python.org issue-tracking third-party-advisory
- APPLE-SA-2009-02-12 mailing-list third-party-advisory vendor-advisory
- SUSE-SR:2008:017 mailing-list third-party-advisory vendor-advisory
- 31305 not-applicable third-party-advisory
- 31332 not-applicable third-party-advisory
- 31358 not-applicable third-party-advisory
- 31365 not-applicable third-party-advisory
- 31473 not-applicable third-party-advisory
- 31518 not-applicable third-party-advisory
- 31687 not-applicable third-party-advisory
- 32793 not-applicable third-party-advisory
- 33937 not-applicable third-party-advisory
- 37471 not-applicable third-party-advisory
- GLSA-200807-16 third-party-advisory vendor-advisory
- SSA:2008-217-01 third-party-advisory vendor-advisory
- support.apple.com third-party-advisory
- wiki.rpath.com broken-link
- DSA-1667 third-party-advisory vendor-advisory
- MDVSA-2008:163 broken-link vendor-advisory
- MDVSA-2008:164 broken-link vendor-advisory
- www.novell.com third-party-advisory
- 20080813 rPSA-2008-0243-1 idle python mailing-list third-party-advisory vdb-entry
- 20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components mailing-list third-party-advisory vdb-entry
- 30491 third-party-advisory vdb-entry
- USN-632-1 third-party-advisory vendor-advisory
- www.vmware.com third-party-advisory
- ADV-2008-2288 permissions-required vdb-entry
- ADV-2009-3316 permissions-required vdb-entry
- python-unicode-bo(44170) third-party-advisory vdb-entry
- python-multiple-bo(44173) third-party-advisory vdb-entry
- oval:org.mitre.oval:def:11466 signature third-party-advisory vdb-entry
- oval:org.mitre.oval:def:8422 signature third-party-advisory vdb-entry