CVE-2018-14647 Python's elementtree C accelerator failed to initialise Expat's hash salt during initialization. This could make it easy to conduct denial of service attacks against Expat by constructing an XML docum...
HighCVSS 7.5
EPSS 10.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Python's elementtree C accelerator failed to initialise Expat's hash salt during initialization. This could make it easy to conduct denial of service attacks against Expat by constructing an XML document that would cause pathological hash collisions in Expat's internal data structures, consuming large amounts CPU and RAM. The vulnerability exists in Python versions 3.7.0, 3.6.0 through 3.6.6, 3.5.0 through 3.5.6, 3.4.0 through 3.4.9, 2.7.0 through 2.7.15.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/python2.7(Debian:11) | < 2.7.15-5 | 2.7.15-5 |
| alpine/python2(Alpine:v3.10) | < 2.7.16-r0 | 2.7.16-r0 |
| alpine/python2(Alpine:v3.11) | < 2.7.16-r0 | 2.7.16-r0 |
| alpine/python2(Alpine:v3.12) | < 2.7.16-r0 | 2.7.16-r0 |
| alpine/python2(Alpine:v3.13) | < 2.7.16-r0 | 2.7.16-r0 |
| alpine/python2(Alpine:v3.14) | < 2.7.16-r0 | 2.7.16-r0 |
| alpine/python2(Alpine:v3.15) | < 2.7.16-r0 | 2.7.16-r0 |
| alpine/python2(Alpine:v3.7) | < 2.7.15-r2 | 2.7.15-r2 |
| alpine/python2(Alpine:v3.8) | < 2.7.15-r2 | 2.7.15-r2 |
| alpine/python2(Alpine:v3.9) | < 2.7.16-r0 | 2.7.16-r0 |
| alpine/python2-tkinter(Alpine:v3.10) | < 2.7.16-r0 | 2.7.16-r0 |
| alpine/python2-tkinter(Alpine:v3.11) | < 2.7.16-r0 | 2.7.16-r0 |
| alpine/python3(Alpine:v3.6) | < 3.6.8-r0 | 3.6.8-r0 |
| alpine/python3(Alpine:v3.7) | < 3.6.8-r0 | 3.6.8-r0 |
| alpine/python3(Alpine:v3.8) | < 3.6.8-r0 | 3.6.8-r0 |
| The Python Project Python | = 3.8, 3.7, 3.6, 3.5, 3.4, 2.7 | No fix listed |
| python | >= 2.7.0, <= 2.7.15 | No fix listed |
| python | >= 3.4.0, <= 3.4.9 | No fix listed |
| python | >= 3.5.0, <= 3.5.6 | No fix listed |
| python | >= 3.6.0, <= 3.6.6 | No fix listed |
| python | = 3.7.0 | No fix listed |
| Canonical Ubuntu Linux | = 12.04 | No fix listed |
| Canonical Ubuntu Linux | = 14.04 | No fix listed |
| Canonical Ubuntu Linux | = 16.04 | No fix listed |
| Canonical Ubuntu Linux | = 18.04 | No fix listed |
Show 7 more
| Product | Affected versions | Fixed in |
|---|---|---|
| debian linux | = 8.0 | No fix listed |
| debian linux | = 9.0 | No fix listed |
| fedoraproject fedora | = 30 | No fix listed |
| openSUSE leap | = 15.1 | No fix listed |
| redhat enterprise linux desktop | = 7.0 | No fix listed |
| redhat enterprise linux server | = 7.0 | No fix listed |
| redhat enterprise linux workstation | = 7.0 | No fix listed |
References
- security-tracker.debian.org vendor-advisory
- security.alpinelinux.org vendor-advisory
- DSA-4306 third-party-advisory vendor-advisory
- USN-3817-2 third-party-advisory vendor-advisory
- 1041740 third-party-advisory vdb-entry
- 105396 third-party-advisory vdb-entry
- DSA-4307 third-party-advisory vendor-advisory
- bugs.python.org issue-tracking patch vendor-advisory
- USN-3817-1 third-party-advisory vendor-advisory
- bugzilla.redhat.com issue-tracking third-party-advisory
- FEDORA-2019-0c91ce7b3c vendor-advisory
- RHSA-2019:1260 third-party-advisory vendor-advisory
- [debian-lts-announce] 20190625 [SECURITY] [DLA 1834-1] python2.7 security update mailing-list third-party-advisory
- [debian-lts-announce] 20190625 [SECURITY] [DLA 1835-1] python3.4 security update mailing-list third-party-advisory
- RHSA-2019:2030 third-party-advisory vendor-advisory
- RHSA-2019:3725 third-party-advisory vendor-advisory
- openSUSE-SU-2020:0086 mailing-list third-party-advisory vendor-advisory
- [bookkeeper-issues] 20200729 [GitHub] [bookkeeper] padma81 opened a new issue #2387: Security vulnerabilities in the apache/bookkeeper-4.9.2 image mailing-list