Test ID:	1.3.6.1.4.1.25623.1.0.118256
Category:	General
Title:	Python < 2.7.12, 3.3.x < 3.3.7, 3.4.x < 3.4.5, 3.5.x < 3.5.2 Expat 2.1.1 (bpo-26556) - Linux
Summary:	Python is prone to multiple integer overflows in Expat.
Description:	Summary: Python is prone to multiple integer overflows in Expat. Vulnerability Insight: Multiple integer overflows in the XML_GetBuffer function in Expat through 2.1.0 allow remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted XML data, a related issue to CVE-2015-2716. Affected Software/OS: Python prior to version 2.7.12, versions 3.3.x prior to 3.3.7, 3.4.x prior to 3.4.5 and 3.5.x prior to 3.5.2. Solution: Update to version 2.7.12, 3.3.7, 3.4.5, 3.5.2 or later. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2015-1283 BugTraq ID: 75973 http://www.securityfocus.com/bid/75973 Debian Security Information: DSA-3315 (Google Search) http://www.debian.org/security/2015/dsa-3315 Debian Security Information: DSA-3318 (Google Search) http://www.debian.org/security/2015/dsa-3318 https://security.gentoo.org/glsa/201603-09 https://security.gentoo.org/glsa/201701-21 RedHat Security Advisories: RHSA-2015:1499 http://rhn.redhat.com/errata/RHSA-2015-1499.html http://www.securitytracker.com/id/1033031 SuSE Security Announcement: SUSE-SU-2016:1508 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00006.html SuSE Security Announcement: SUSE-SU-2016:1512 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00007.html SuSE Security Announcement: openSUSE-SU-2015:1287 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00038.html SuSE Security Announcement: openSUSE-SU-2016:1441 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00064.html SuSE Security Announcement: openSUSE-SU-2016:1523 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00010.html http://www.ubuntu.com/usn/USN-2726-1
Copyright	Copyright (C) 2021 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.