CVE-2016-5636 Integer overflow in the get_data function in zipimport.c in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 allows remote attackers to have unspecified impact via a negati...
CriticalCVSS 9.8
EPSS 25.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integer overflow in the get_data function in zipimport.c in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 allows remote attackers to have unspecified impact via a negative data size value, which triggers a heap-based buffer overflow.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/python2.7(Debian:11) | < 2.7.12~rc1-1 | 2.7.12~rc1-1 |
| python | = 3.0 | No fix listed |
| python | = 3.0.1 | No fix listed |
| python | = 3.1.0 | No fix listed |
| python | = 3.1.1 | No fix listed |
| python | = 3.1.2 | No fix listed |
| python | = 3.1.3 | No fix listed |
| python | = 3.1.4 | No fix listed |
| python | = 3.1.5 | No fix listed |
| python | = 3.2.0 | No fix listed |
| python | = 3.2.1 | No fix listed |
| python | = 3.2.2 | No fix listed |
| python | = 3.2.3 | No fix listed |
| python | = 3.2.4 | No fix listed |
| python | = 3.2.5 | No fix listed |
| python | = 3.2.6 | No fix listed |
| python | = 3.3.0 | No fix listed |
| python | = 3.3.1 | No fix listed |
| python | = 3.3.2 | No fix listed |
| python | = 3.3.3 | No fix listed |
| python | = 3.3.4 | No fix listed |
| python | = 3.3.5 | No fix listed |
| python | = 3.3.6 | No fix listed |
| python | = 3.4.0 | No fix listed |
| python | = 3.4.1 | No fix listed |
Show 6 more
| Product | Affected versions | Fixed in |
|---|---|---|
| python | = 3.4.2 | No fix listed |
| python | = 3.4.3 | No fix listed |
| python | = 3.4.4 | No fix listed |
| python | <= 2.7.11 | No fix listed |
| python | = 3.5.0 | No fix listed |
| python | = 3.5.1 | No fix listed |
References
- security-tracker.debian.org vendor-advisory
- openSUSE-SU-2020:0086 vendor-advisory
- RHSA-2016:2586 vendor-advisory
- [oss-security] 20160615 CVE Request: heap overflow in Python zipimport module mailing-list
- [oss-security] 20160616 Re: CVE Request: heap overflow in Python zipimport module mailing-list
- www.oracle.com
- 91247 vdb-entry
- 1038138 vdb-entry
- www.splunk.com
- www.splunk.com
- bugs.python.org issue-tracking patch
- docs.python.org release-notes
- docs.python.org release-notes
- hg.python.org release-notes
- [debian-lts-announce] 20190207 [SECURITY] [DLA 1663-1] python3.4 security update mailing-list
- GLSA-201701-18 vendor-advisory