ID de Prueba:	1.3.6.1.4.1.25623.1.0.118268
Categoría:	Denial of Service
Título:	Python < 2.6.8, 2.7.x < 2.7.3, 3.1.x < 3.1.5, 3.2.x < 3.2.3 Hash DoS (bpo-13703) - Linux
Resumen:	Python is prone to a denial of service (DoS) vulnerability.
Descripción:	Summary: Python is prone to a denial of service (DoS) vulnerability. Vulnerability Insight: Python computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a DoS (CPU consumption) via crafted input to an application that maintains a hash table. Affected Software/OS: Python prior to version 2.6.8, versions 2.7.x prior to 2.7.3, 3.1.x < 3.1.5 and 3.2.x prior to 3.2.3. Solution: Update to version 2.6.8, 2.7.3, 3.1.5, 3.2.3 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2012-1150 50858 http://secunia.com/advisories/50858 51087 http://secunia.com/advisories/51087 51089 http://secunia.com/advisories/51089 APPLE-SA-2013-10-22-3 http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html USN-1592-1 http://www.ubuntu.com/usn/USN-1592-1 USN-1596-1 http://www.ubuntu.com/usn/USN-1596-1 USN-1615-1 http://www.ubuntu.com/usn/USN-1615-1 USN-1616-1 http://www.ubuntu.com/usn/USN-1616-1 [oss-security] 20120309 Re: CVE Request: Python Hash DoS (Issue 13703) http://www.openwall.com/lists/oss-security/2012/03/10/3 [python-dev] 20111229 Hash collision security issue (now public) http://mail.python.org/pipermail/python-dev/2011-December/115116.html [python-dev] 20120128 plugging the hash attack http://mail.python.org/pipermail/python-dev/2012-January/115892.html http://bugs.python.org/issue13703 http://python.org/download/releases/2.6.8/ http://python.org/download/releases/2.7.3/ http://python.org/download/releases/3.1.5/ http://python.org/download/releases/3.2.3/ https://bugzilla.redhat.com/show_bug.cgi?id=750555 openSUSE-SU-2020:0086 http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html
Copyright	Copyright (C) 2021 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.