Search 219043 CVE descriptions
and 99761 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:
Category:Red Hat Local Security Checks
Title:RedHat Security Advisory RHSA-2009:1176
The remote host is missing updates announced in
advisory RHSA-2009:1176.

Python is an interpreted, interactive, object-oriented programming

When the assert() system call was disabled, an input sanitization flaw was
revealed in the Python string object implementation that led to a buffer
overflow. The missing check for negative size values meant the Python
memory allocator could allocate less memory than expected. This could
result in arbitrary code execution with the Python interpreter's
privileges. (CVE-2008-1887)

Multiple buffer and integer overflow flaws were found in the Python Unicode
string processing and in the Python Unicode and string object
implementations. An attacker could use these flaws to cause a denial of
service (Python application crash). (CVE-2008-3142, CVE-2008-5031)

Multiple integer overflow flaws were found in the Python imageop module. If
a Python application used the imageop module to process untrusted images,
it could cause the application to disclose sensitive information, crash or,
potentially, execute arbitrary code with the Python interpreter's
privileges. (CVE-2007-4965, CVE-2008-4864)

Multiple integer underflow and overflow flaws were found in the Python
snprintf() wrapper implementation. An attacker could use these flaws to
cause a denial of service (memory corruption). (CVE-2008-3144)

Multiple integer overflow flaws were found in various Python modules. An
attacker could use these flaws to cause a denial of service (Python
application crash). (CVE-2008-2315, CVE-2008-3143)

An integer signedness error, leading to a buffer overflow, was found
in the Python zlib extension module. If a Python application requested
the negative byte count be flushed for a decompression stream, it could
cause the application to crash or, potentially, execute arbitrary code
with the Python interpreter's privileges. (CVE-2008-1721)

A flaw was discovered in the strxfrm() function of the Python locale
module. Strings generated by this function were not properly
NULL-terminated, which could possibly cause disclosure of data stored in
the memory of a Python application using this function. (CVE-2007-2052)

Red Hat would like to thank David Remahl of the Apple Product Security team
for responsibly reporting the CVE-2008-2315 issue.

All Python users should upgrade to these updated packages, which contain
backported patches to correct these issues.

Please note that this update is available via
Red Hat Network. To use Red Hat Network, launch the Red
Hat Update Agent with the following command: up2date

CVSS Score:

CVSS Vector:

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2007-2052
BugTraq ID: 23887
Bugtraq: 20070521 FLEA-2007-0019-1: python (Google Search)
Bugtraq: 20080221 VMSA-2008-0003 Moderate: Updated aacraid driver and samba and python service console updates (Google Search)
Bugtraq: 20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components (Google Search)
Debian Security Information: DSA-1551 (Google Search)
Debian Security Information: DSA-1620 (Google Search)
SuSE Security Announcement: SUSE-SR:2007:013 (Google Search)
XForce ISS Database: python-localemodule-information-disclosure(34060)
Common Vulnerability Exposure (CVE) ID: CVE-2007-4965
BugTraq ID: 25696
Bugtraq: 20080212 FLEA-2008-0002-1 python (Google Search)
Cert/CC Advisory: TA07-352A
SuSE Security Announcement: SUSE-SR:2008:003 (Google Search)
XForce ISS Database: python-imageop-bo(36653)
Common Vulnerability Exposure (CVE) ID: CVE-2008-1721
BugTraq ID: 28715
Bugtraq: 20080409 IOActive Security Advisory: Buffer overflow in Python zlib extension module (Google Search)
XForce ISS Database: zlib-pystringfromstringandsize-bo(41748)
Common Vulnerability Exposure (CVE) ID: CVE-2008-1887
BugTraq ID: 28749
Bugtraq: 20080411 IOActive Security Advisory: Incorrect input validation in PyString_FromStringAndSize() leads to multiple buffer overflows (Google Search)
Bugtraq: 20090824 rPSA-2009-0122-1 idle python (Google Search)
SuSE Security Announcement: SUSE-SR:2008:017 (Google Search)
XForce ISS Database: python-pystringfromstringandsize-bo(41944)
Common Vulnerability Exposure (CVE) ID: CVE-2008-2315
BugTraq ID: 30491
Debian Security Information: DSA-1667 (Google Search)
XForce ISS Database: python-modules-bo(44172)
XForce ISS Database: python-multiple-bo(44173)
Common Vulnerability Exposure (CVE) ID: CVE-2008-3142
Bugtraq: 20080813 rPSA-2008-0243-1 idle python (Google Search)
XForce ISS Database: python-unicode-bo(44170)
Common Vulnerability Exposure (CVE) ID: CVE-2008-3143
Common Vulnerability Exposure (CVE) ID: CVE-2008-3144
XForce ISS Database: python-pyosvsnprintf-bo(44171)
Common Vulnerability Exposure (CVE) ID: CVE-2008-4864
BugTraq ID: 31932
BugTraq ID: 31976
XForce ISS Database: python-image-module-bo(46606)
Common Vulnerability Exposure (CVE) ID: CVE-2008-5031
XForce ISS Database: python-expandtabs-integer-overflow(46612)
CopyrightCopyright (c) 2009 E-Soft Inc.

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.

© 1998-2021 E-Soft Inc. All rights reserved.